AI Slop Code Risk Monitor

shadowsocks/shadowsocks-rust

SlopCodeMonitor badge for shadowsocks/shadowsocks-rust Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A Rust port of shadowsocks

0.9 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for shadowsocks/shadowsocks-rust, a Rust project with 10,959 GitHub stars. SynthScan examined 108,325 lines of code across 261 source files, recording 99 pattern matches distributed across 5 syntactic categories. The legacy adjusted pattern signal is 0.9 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.9
Adjusted Signal
0.9
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
11.0K
Stars
Rust
Language
108.3K
Lines of Code
261
Files
99
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 4.4/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 97 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 1 finding(s).

PR Review Velocity Impact 4.5/100 · LOW

Which changes need focused human review? 99 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 99

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 99 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block94 hits · 94 pts
SeverityFileLineSnippetContext
LOWdeny.toml1# This template contains all of the possible sections and their default valuesCOMMENT
LOWdeny.toml21# `target_family = "unix"` configuration, that only having windows targets inCOMMENT
LOWdeny.toml41#exclude = []COMMENT
LOWdeny.toml61COMMENT
LOWdeny.toml101 "CC0-1.0",COMMENT
LOWdeny.toml121# licensing informationCOMMENT
LOWdeny.toml141COMMENT
LOWdeny.toml161# Lint level for when a crate version requirement is `*`COMMENT
LOWdeny.toml181]COMMENT
LOWdeny.toml201# "__rustls",COMMENT
LOWdeny.toml221# dependencies starting at the specified crate, up to a certain depth, which isCOMMENT
LOWCross.toml1[build]COMMENT
LOWREADME.md721 // FreeBSD/OpenBSD: pf (default), ipfwCOMMENT
LOWREADME.md821 ],COMMENT
LOWREADME.md841 // Outbound socket bind() to this IP (choose a specific interface)COMMENT
LOWREADME.md861 }COMMENT
LOWREADME.md881 // - google (TCP, UDP)COMMENT
LOWREADME.md921 // Outbound socket bind() to this IP (choose a specific interface)COMMENT
LOWcrates/shadowsocks-service/src/config.rs1//! This is a mod for storing and parsing configurationCOMMENT
LOWcrates/shadowsocks-service/src/config.rs21//! ```ignoreCOMMENT
LOWcrates/shadowsocks-service/src/config.rs441 #[serde(skip_serializing_if = "Option::is_none")]COMMENT
LOWcrates/shadowsocks-service/src/config.rs461 local_dns_address: Option<String>,COMMENT
LOWcrates/shadowsocks-service/src/config.rs481 forward_address: Option<String>,COMMENT
LOWcrates/shadowsocks-service/src/config.rs501 #[cfg(feature = "local")]COMMENT
LOWcrates/shadowsocks-service/src/config.rs661 pub enum RedirType {COMMENT
LOWcrates/shadowsocks-service/src/config.rs981pub struct ManagerConfig {COMMENT
LOWcrates/shadowsocks-service/src/config.rs1141 /// Destination address for tunnelCOMMENT
LOWcrates/shadowsocks-service/src/config.rs1161 pub remote_dns_addr: Option<Address>,COMMENT
LOWcrates/shadowsocks-service/src/config.rs1181 #[cfg(all(feature = "local-tun", unix))]COMMENT
LOWcrates/shadowsocks-service/src/config.rs1201 /// </dict>COMMENT
LOWcrates/shadowsocks-service/src/config.rs1501}COMMENT
LOWcrates/shadowsocks-service/src/config.rs1521 pub dns_cache_size: Option<usize>,COMMENT
LOWcrates/shadowsocks-service/src/config.rs1541COMMENT
LOWcrates/shadowsocks-service/src/config.rs1581 /// Timeout for UDP Associations, default is 5 minutesCOMMENT
LOWcrates/shadowsocks-service/src/config.rs2741 protocol = DnsProtocol::Udp;COMMENT
LOWcrates/shadowsocks-service/src/lib.rs1//! Shadowsocks ServiceCOMMENT
LOWcrates/shadowsocks-service/src/lib.rs21//! "local_port": 1080,COMMENT
LOWcrates/shadowsocks-service/src/lib.rs41//!COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/stream.rs21use super::http_connect::HttpConnectTunnel;COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/stream.rs81COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/auth.rs1//! Outbound proxy authentication primitives.COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/mod.rs1//! Outbound proxy chain support.COMMENT
LOW…s/shadowsocks-service/src/net/outbound/http_connect.rs1//! HTTP CONNECT outbound proxy client built on top of `hyper`.COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/tls.rs41/// would explode the type. There is **no** dynamic dispatch involvedCOMMENT
LOWcrates/shadowsocks-service/src/net/outbound/udp.rs1//! Outbound UDP relay through a SOCKS5-only proxy chain.COMMENT
LOWcrates/shadowsocks-service/src/net/outbound/udp.rs61/// [`DatagramSocket`] / [`DatagramSend`] / [`DatagramReceive`] triple.COMMENT
LOWcrates/shadowsocks-service/src/local/context.rs121 ///COMMENT
LOW…owsocks-service/src/local/loadbalancing/server_stat.rs21COMMENT
LOW…ates/shadowsocks-service/src/local/http/http_client.rs41/// HTTPClient API request errorsCOMMENT
LOWcrates/shadowsocks-service/src/local/socks/config.rs41 }COMMENT
LOWcrates/shadowsocks-service/src/local/socks/socks4.rs181/// The client connects to the SOCKS server and sends a CONNECT/BIND request whenCOMMENT
LOWcrates/shadowsocks-service/src/acl/mod.rs281 self.rules_set,COMMENT
LOWcrates/shadowsocks-service/src/acl/mod.rs301/// RULE-1COMMENT
LOWcrates/shadowsocks-service/src/acl/mod.rs321/// * `[outbound_allow_list]` - Rules for allowing outbound addresses.COMMENT
LOWcrates/shadowsocks-service/src/acl/mod.rs681 }COMMENT
LOWcrates/shadowsocks/src/net/option.rs21 /// enables keep-alive messages on connection-oriented socketsCOMMENT
LOWcrates/shadowsocks/src/net/option.rs41 /// UDP socket allows IP fragmentationCOMMENT
LOWcrates/shadowsocks/src/net/option.rs101 ///COMMENT
LOWcrates/shadowsocks/src/plugin/obfs_proxy.rs1use super::{PluginConfig, PluginMode};COMMENT
LOWcrates/shadowsocks/src/plugin/mod.rs1//! Plugin (SIP003)COMMENT
34 more matches not shown…
Redundant / Tautological Comments2 hits · 3 pts
SeverityFileLineSnippetContext
LOWcrates/shadowsocks/src/relay/tcprelay/utils.rs364/// # Return valueCOMMENT
LOWcrates/shadowsocks/src/relay/tcprelay/utils.rs411/// # Return valueCOMMENT
Deep Nesting1 hit · 1 pts
SeverityFileLineSnippetContext
LOWconfigs/genipset.py17CODE
Modern Structural Boilerplate1 hit · 1 pts
SeverityFileLineSnippetContext
LOWacl/genacl_proxy_gfw_bypass_china_ip.py10logger = logging.getLogger(__name__)CODE
Unused Imports1 hit · 1 pts
SeverityFileLineSnippetContext
LOWacl/genacl_proxy_gfw_bypass_china_ip.py3CODE