AI Slop Code Risk Monitor

pestphp/pest

SlopCodeMonitor badge for pestphp/pest Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

The elegant testing framework for PHP developers and AI agents.

1.7 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for pestphp/pest, a PHP project with 11,754 GitHub stars. SynthScan examined 50,004 lines of code across 672 source files, recording 81 pattern matches distributed across 3 syntactic categories. The legacy adjusted pattern signal is 1.7 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.7
Adjusted Signal
1.7
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
11.8K
Stars
PHP
Language
50.0K
Lines of Code
672
Files
81
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 7.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 79 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.2/100 · LOW

Are imports declared and package/API names verified? 2 finding(s).

Agent Over-Engineering Ratio 7.5/100 · LOW

Are wrappers, guards, and repeated structures necessary? 75 finding(s).

PR Review Velocity Impact 7.8/100 · LOW

Which changes need focused human review? 81 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 81

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 81 distinct pattern matches across 3 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers75 hits · 78 pts
SeverityFileLineSnippetContext
LOWoverrides/Logging/JUnit/JunitXmlLogger.php213 public function testPrintedUnexpectedOutput(PrintedUnexpectedOutput $event): voidCODE
LOWoverrides/Logging/JUnit/JunitXmlLogger.php373 private function handleIncompleteOrSkipped(MarkedIncomplete|Skipped $event): voidCODE
LOWtests/Autoload.php9 public function assertPluginTraitGotRegistered(): voidCODE
LOWtests/Autoload.php17 public function assertSecondPluginTraitGotRegistered(): voidCODE
LOWtests/Pest.php84function removeAnsiEscapeSequences(string $input): ?stringCODE
LOWtests/Unit/Plugins/Tia/NumericTableDependencies.php168function tiaAssertNumericTableGraph(string $root, array $files, array $tables, array $expected, array $selections): voidCODE
LOWtests/Unit/Plugins/Tia/NumericTableDependencies.php198function tiaRemoveNumericTableProject(string $root): voidCODE
LOWtests/Unit/Plugins/Tia/ResultKey.php41function tiaResultKeyTelemetryInfo(): InfoCODE
LOWtests/Features/Tia/RemoteBaselineGitLab.php15function tiaPublishedBaselineGitLab(string $mode = 'ok', ?callable $mutator = null): arrayCODE
LOWtests/Features/Tia/LivewireComponents.php19function tiaSeedWithGeneratedViews(Project $project, array $generatedToTest): voidCODE
LOW…ders/SubFolder/SubFolder/CustomTestCaseInSubFolder.php11 public function assertCustomInSubFolderTrue(): voidCODE
LOWsrc/Expectation.php448 public function toHaveFileSystemPermissions(string $permissions): ArchExpectationCODE
LOWsrc/Expectation.php484 public function toHavePropertiesDocumented(): ArchExpectationCODE
LOW⚡src/Expectation.php589 public function toHavePublicMethodsBesides(): voidCODE
LOW⚡src/Expectation.php599 public function toHaveProtectedMethodsBesides(): voidCODE
LOW⚡src/Expectation.php609 public function toHavePrivateMethodsBesides(): voidCODE
LOWsrc/Expectation.php838 public function toHaveSuspiciousCharacters(): ArchExpectationCODE
LOWsrc/Plugins/Snapshot.php20 public static function shouldCreateMissingSnapshots(): boolCODE
LOWsrc/Plugins/Cache.php58 private function hasTestRunHistoryArgument(array $arguments): boolCODE
LOWsrc/Plugins/Configuration.php41 private function fromGeneratedConfigurationFile(): stringCODE
LOWsrc/Plugins/Configuration.php58 private function hasCustomConfigurationFile(): boolCODE
LOWsrc/Plugins/Coverage.php171 private function computeComparableCoverage(float $coverage): floatCODE
LOWsrc/Plugins/Parallel.php154 private function hasArgumentsThatWouldBeFasterWithoutParallel(): boolCODE
LOWsrc/Plugins/Tia.php237 private function structuralFingerprintShifted(array $current): boolCODE
LOWsrc/Plugins/Tia.php1051 private function activateWorkerRecorderForReplay(array $arguments): arrayCODE
LOW⚡src/Plugins/Tia.php1366 private function emitCoverageDriverMissing(): voidCODE
LOW⚡src/Plugins/Tia.php1373 private function emitCoverageScopedRecordSkipped(): voidCODE
LOW⚡src/Plugins/Tia.php1381 private function emitMutationScopedRecordSkipped(): voidCODE
LOWsrc/Plugins/Tia.php1412 private function collectWorkerEdgesPartials(): arrayCODE
LOWsrc/Plugins/Tia.php1417 private function reportMissingWorkerDrivers(): voidCODE
LOWsrc/Plugins/Tia.php1494 private function collectWorkerReplayPartials(): arrayCODE
LOWsrc/Plugins/Tia.php1499 private function mergeWorkerReplayPartials(): voidCODE
LOWsrc/Plugins/Tia.php2138 private function hasProjectPhpSourceChanges(array $changedFiles): boolCODE
LOWsrc/Plugins/Tia.php2174 private function tryRemoteBaselineForDrift(array $current): ?GraphCODE
LOWsrc/Plugins/Tia.php2298 private function augmentDatabaseTestTables(array $perTestTables, array $perTestUsesDatabase, string $projectRoot): aCODE
LOWsrc/Plugins/Tia/CoverageMerger.php117 private static function stripCurrentTestsFromCached(CodeCoverage $cached, CodeCoverage $current): voidCODE
LOWsrc/Plugins/Tia/CoverageMerger.php160 private static function dropLinesMissingFromCurrent(CodeCoverage $cached, CodeCoverage $current): voidCODE
LOWsrc/Plugins/Tia/CoverageMerger.php249 private static function coverageFromSerializedData(string $reportPath): ?CodeCoverageCODE
LOWsrc/Plugins/Tia/ChangedFiles.php27 public function filterUnchangedSinceLastRun(array $files, array $lastRunTree): arrayCODE
LOWsrc/Plugins/Tia/ChangedFiles.php132 private function filterBehaviourallyUnchanged(array $files, string $sha): arrayCODE
LOWsrc/Plugins/Tia/Graph.php497 private function applyLivewireComponentChanges(array $nonMigrationPaths, array &$affectedSet): arrayCODE
LOWsrc/Plugins/Tia/Graph.php556 private function isLivewireMultiFileDirectory(string $componentDirectory): boolCODE
LOWsrc/Plugins/Tia/Graph.php633 private function applyWatchPatternFallback(CODE
LOWsrc/Plugins/Tia/Graph.php1099 public function replaceTestInertiaComponents(array $testToComponents): voidCODE
LOWsrc/Plugins/Tia/Graph.php1126 public function replaceJsFileToComponents(array $fileToComponents): voidCODE
LOWsrc/Plugins/Tia/Graph.php1165 private function usesSiblingHeuristicForUnknownPhp(string $rel): boolCODE
LOWsrc/Plugins/Tia/Graph.php1279 private function testSourceDeclaresArchGroup(string $rel): boolCODE
LOWsrc/Plugins/Tia/Graph.php1305 private function affectedByStaticBladeUsage(string $changedBlade): arrayCODE
LOWsrc/Plugins/Tia/Graph.php1533 private function isGlobalFrontendRuntimePath(string $rel): boolCODE
LOWsrc/Plugins/Tia/Graph.php1589 public function pruneResultsForMissingFiles(string $branch): voidCODE
LOWsrc/Plugins/Tia/BaselineSync.php319 private function validateDownloadedArtifact(string $runCacheDir, bool $hasAnchor): arrayCODE
LOWsrc/Plugins/Parallel/Paratest/WrapperRunner.php514 private static function numberOfTestsSeenByWorker(TestResult $result): intCODE
LOWsrc/Plugins/Parallel/Paratest/WrapperRunner.php522 private static function numberOfDeprecationsByTrigger(TestResult ...$results): arrayCODE
LOWsrc/Plugins/Parallel/Paratest/WrapperRunner.php541 private function generateCodeCoverageReports(): voidCODE
LOWsrc/Plugins/Parallel/Paratest/WrapperRunner.php664 private function shouldIncludeBootstrappedTestFile(string $filename): boolCODE
LOWsrc/Plugins/Parallel/Handlers/Laravel.php67 private function ensureEnvironmentVariables(array $arguments): arrayCODE
LOWsrc/Expectations/OppositeExpectation.php80 public function toHaveFileSystemPermissions(string $permissions): ArchExpectationCODE
LOWsrc/Expectations/OppositeExpectation.php117 public function toHavePropertiesDocumented(): ArchExpectationCODE
LOWsrc/Expectations/OppositeExpectation.php241 public function toHaveSuspiciousCharacters(): ArchExpectationCODE
LOWsrc/Expectations/OppositeExpectation.php271 public function toHavePublicMethodsBesides(array|string $methods): ArchExpectationCODE
15 more matches not shown…
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOWtests/.snapshots/success.txt1301 ✓ it may have a static noteCOMMENT
LOWtests/.snapshots/success.txt1321 // This is a runtime note within describeCOMMENT
LOWtests/.snapshots/success.txt1341 // This is a runtime note within a matching describeCOMMENT
LOWtests/.snapshots/success.txt1621 ↓ todo on describe → todo block → nested inside todo block → it should not executeCOMMENT
Fake / Example Data2 hits · 2 pts
SeverityFileLineSnippetContext
LOWtests/Features/Expect/toBeEmail.php8 expect('user@example.com')->toBeEmail()CODE
LOWtests/Features/Expect/toBeEmail.php25 expect('user@example.com')->not->toBeEmail();CODE