A cloud native embedded storage engine built on object storage.
This report summarizes scanner evidence for slatedb/slatedb, a Rust project with 3,479 GitHub stars. SynthScan examined 235,814 lines of code across 383 source files, recording 797 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 4.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 760 finding(s).
Are imports declared and package/API names verified? 36 finding(s).
Are wrappers, guards, and repeated structures necessary? 44 finding(s).
Which changes need focused human review? 797 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 797 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | slatedb-common/src/clock.rs | 1 | //! This module contains utility methods and structs for handling time. | COMMENT |
| LOW | slatedb-common/src/clock.rs | 81 | COMMENT | |
| LOW | slatedb-common/src/lib.rs | 1 | //! Common utilities shared across SlateDB crates. | COMMENT |
| LOW | slatedb-common/src/metrics.rs | 1 | //! # Metrics Module | COMMENT |
| LOW | slatedb-common/src/metrics.rs | 21 | // --------------------------------------------------------------------------- | COMMENT |
| LOW | slatedb-common/src/metrics.rs | 41 | COMMENT | |
| LOW | slatedb-common/src/metrics.rs | 61 | COMMENT | |
| LOW | slatedb-common/src/metrics.rs | 81 | /// - `name` – Dotted metric name. | COMMENT |
| LOW | slatedb-common/src/metrics.rs | 141 | /// Controls which metrics are active. Metrics with a level below the configured | COMMENT |
| LOW | slatedb-common/src/rand.rs | 21 | pub(crate) type RngAlg = Xoroshiro128PlusPlus; | COMMENT |
| LOW | slatedb-common/src/utils.rs | 1 | use crate::clock::SystemClock; | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 1 | //! # SlateDB Transactional Object | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 21 | //! monotonically increasing IDs. This is useful if it's important to observe earlier versions of | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 41 | //! ## Error semantics | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 261 | /// corresponding `update` or `refresh` fails with`Fenced`. | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 321 | }) | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 341 | /// - `get_epoch`: Extracts the epoch from the object value. | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 581 | /// [`TransactionalObjectError::ObjectVersionExists`] as a failed write if the just-created ID is | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 601 | /// | COMMENT |
| LOW | slatedb-txn-obj/src/lib.rs | 621 | new_value: &T, | COMMENT |
| LOW | slatedb-txn-obj/src/object_store.rs | 141 | Err(e) => Err(TransactionalObjectError::from(e)), | COMMENT |
| LOW | slatedb-cli/src/args.rs | 81 | CreateCheckpoint { | COMMENT |
| LOW | slatedb-cli/src/args.rs | 101 | #[arg(short, long)] | COMMENT |
| LOW | slatedb-cli/src/args.rs | 141 | ListCheckpoints { | COMMENT |
| LOW | slatedb-cli/src/args.rs | 181 | max_keys: Option<u64>, | COMMENT |
| LOW | slatedb-cli/src/args.rs | 201 | #[arg(short, long)] | COMMENT |
| LOW | slatedb-cli/src/args.rs | 261 | /// `"Full"` sweeps every tree in the DB (root + every named segment) | COMMENT |
| LOW | slatedb-cli/src/args.rs | 301 | /// Configuration for WAL garbage collection should be set in the | COMMENT |
| LOW | slatedb-dst/tests/segments.rs | 1 | //! Verifies deterministic scenario-test behavior for RFC-0024 segmented | COMMENT |
| LOW | slatedb-dst/tests/determinism.rs | 1 | //! Verifies deterministic scenario-test behavior for SlateDB under DST | COMMENT |
| LOW | slatedb-dst/tests/rescaling.rs | 1 | //! Verifies that RFC-0004 projection and union preserve database contents under | COMMENT |
| LOW | slatedb-dst/tests/rescaling.rs | 21 | //! keeps every point operation, write batch, and prefix scan inside one child. | COMMENT |
| LOW | slatedb-dst/src/deterministic_local_filesystem.rs | 181 | } | COMMENT |
| LOW | slatedb-dst/src/rescaling.rs | 1 | //! Data-preservation checks for RFC-0004 split and merge scenarios. | COMMENT |
| LOW | slatedb-dst/src/rescaling.rs | 21 | //! operations, write batches, and scans stay within one child. The child | COMMENT |
| LOW | slatedb-dst/src/scenarios.rs | 1 | //! Shared structures and execution logic for running DST scenarios. | COMMENT |
| LOW | slatedb-dst/src/scenarios.rs | 41 | use crate::{DeterministicLocalFilesystem, Harness}; | COMMENT |
| LOW | slatedb-dst/src/scenarios.rs | 61 | /// Mock-clock deadline (ms since the unix epoch) at which the | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 81 | /// This exposes the database path, object stores, clock, failpoint | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 121 | /// | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 161 | COMMENT | |
| LOW | slatedb-dst/src/harness.rs | 181 | self.shared.startup_ctx.merge_operator() | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 261 | /// Returns the shared failpoint registry for the harness run. | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 281 | COMMENT | |
| LOW | slatedb-dst/src/harness.rs | 401 | /// | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 441 | self | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 461 | /// clock-wrapped object stores. | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 501 | /// ## Returns | COMMENT |
| LOW | slatedb-dst/src/harness.rs | 521 | COMMENT | |
| LOW | slatedb-dst/src/harness.rs | 541 | COMMENT | |
| LOW | slatedb-dst/src/harness.rs | 601 | runtime.block_on(self.run_async()) | COMMENT |
| LOW | slatedb-dst/src/prefix_extractor.rs | 1 | //! Deterministic prefix extractors for DST scenarios. | COMMENT |
| LOW | slatedb-dst/src/utils.rs | 181 | }), | COMMENT |
| LOW | slatedb-dst/src/actors/compactor.rs | 41 | }) | COMMENT |
| LOW | slatedb-dst/src/actors/mod.rs | 1 | //! Reusable deterministic workload actors for DST scenarios. | COMMENT |
| LOW | website/public/robots.txt | 1 | # SlateDB website | COMMENT |
| LOW | website/scripts/generate-md-mirrors.js | 1 | // Generate per-page .md mirrors of every docs page so LLM agents (and humans | COMMENT |
| LOW | rfcs/0004-checkpoints.md | 81 | ### Manifest Schema | COMMENT |
| LOW | rfcs/0004-checkpoints.md | 321 | /// Configuration options for the database reader. These options are set on client startup. | COMMENT |
| LOW | rfcs/0013-compaction-state-persistence.md | 161 | COMMENT | |
| 631 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | slatedb/src/checkpoint.rs | 357 | assert_eq!(latest_manifest.manifest.core.tree.l0.len(), 1); | CODE |
| CRITICAL | slatedb/src/db.rs | 2458 | assert!(!manifest.manifest.core.tree.l0.is_empty()); | CODE |
| CRITICAL | slatedb/src/db.rs | 2481 | assert!(!manifest.manifest.core.tree.compacted.is_empty()); | CODE |
| CRITICAL | slatedb/src/db.rs | 3568 | manifest.manifest.core.tree.l0.is_empty(), | CODE |
| CRITICAL | slatedb/src/db.rs | 3897 | assert_eq!(1, state.state.manifest.value.core.tree.l0.len()); | CODE |
| CRITICAL | slatedb/src/db.rs | 3898 | let view = state.state.manifest.value.core.tree.l0.front().unwrap(); | CODE |
| CRITICAL | slatedb/src/db.rs | 7023 | manifest.manifest.core.tree.l0.len(), | CODE |
| CRITICAL | slatedb/src/db.rs | 7024 | manifest.manifest.core.tree.compacted.len() | CODE |
| CRITICAL | slatedb/src/db.rs | 7048 | manifest.manifest.core.tree.l0.len(), | CODE |
| CRITICAL | slatedb/src/db.rs | 7049 | manifest.manifest.core.tree.compacted.len() | CODE |
| CRITICAL | slatedb/src/db.rs | 7063 | manifest.manifest.core.tree.l0.len(), | CODE |
| CRITICAL | slatedb/src/db.rs | 7064 | manifest.manifest.core.tree.compacted.len() | CODE |
| CRITICAL | slatedb/src/db.rs | 8780 | manifest.manifest.core.tree.l0.len(), | CODE |
| CRITICAL | slatedb/src/db.rs | 9588 | s.current_manifest.manifest.core.checkpoints.len() > initial_checkpoint_count | CODE |
| CRITICAL | slatedb/src/db.rs | 9596 | status.current_manifest.manifest.core.checkpoints.len(), | CODE |
| CRITICAL | slatedb/src/db.rs | 11279 | .modify(|m| m.state.manifest.value.core.segments.clear()); | CODE |
| CRITICAL | slatedb/src/clone.rs | 896 | if !current.manifest.core.tree.compacted.is_empty() { | CODE |
| CRITICAL | slatedb/src/clone.rs | 897 | assert_eq!(current.manifest.core.tree.l0.len(), 8 - max_sources); | CODE |
| CRITICAL | slatedb/src/clone.rs | 1801 | !manifest.manifest.core.tree.l0.is_empty(), | CODE |
| CRITICAL | slatedb/src/clone.rs | 1905 | !manifest.manifest.core.tree.l0.is_empty(), | CODE |
| CRITICAL | slatedb/src/clone.rs | 2007 | !manifest.manifest.core.tree.l0.is_empty(), | CODE |
| CRITICAL | slatedb/src/garbage_collector.rs | 1535 | assert_eq!(current_manifest.manifest.core.tree.l0.len(), 2); | CODE |
| CRITICAL | slatedb/src/garbage_collector.rs | 1536 | assert_eq!(current_manifest.manifest.core.tree.compacted.len(), 1); | CODE |
| CRITICAL | slatedb/src/garbage_collector.rs | 1573 | assert_eq!(current_manifest.manifest.core.tree.l0.len(), 2); | CODE |
| CRITICAL | slatedb/src/garbage_collector.rs | 1574 | assert_eq!(current_manifest.manifest.core.tree.compacted.len(), 1); | CODE |
| CRITICAL | slatedb/src/sst_reader.rs | 398 | !manifest.manifest.core.tree.l0.is_empty(), | CODE |
| CRITICAL | slatedb/src/memtable_flusher/tracker.rs | 1431 | modifier.state.manifest.value.core.segments.clear(); | CODE |
| CRITICAL | …rc/test/java/io/slatedb/uniffi/SlateDbLoggingTest.java | 59 | org.junit.jupiter.api.Assertions.assertFalse(condition); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bindings/python/tests/test_reader.py | 52 | async def test_reader_build_fails_when_database_is_missing() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 77 | async def test_reader_scan_variants() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 179 | async def test_reader_refresh_polling_updates_visible_state() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 200 | async def test_reader_default_mode_replays_new_wal_data() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 217 | async def test_reader_skip_wal_replay_ignores_wal_only_data() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 244 | async def test_reader_merge_operator() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 263 | async def test_reader_builder_validation_and_errors() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 294 | async def test_reader_invalid_ranges_raise_invalid_errors() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 332 | async def test_reader_shared_db_cache() -> None: | CODE |
| LOW | bindings/python/tests/test_reader.py | 362 | async def test_reader_db_cache_disabled() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 28 | async def test_admin_builder_accepts_configuration_and_is_single_use() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 61 | async def test_admin_manifest_read_list_and_state_view() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 102 | async def test_admin_compaction_queries_handle_empty_store_and_invalid_ids() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 123 | async def test_admin_run_gc_once_accepts_default_and_custom_options() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 154 | async def test_admin_checkpoint_listing_tracks_reader_lifecycle() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 192 | async def test_admin_sequence_lookups_use_persisted_tracker() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 248 | async def test_admin_create_detached_checkpoint_without_options() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 273 | async def test_admin_create_detached_checkpoint_with_lifetime() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 302 | async def test_admin_create_detached_checkpoint_with_name() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 332 | async def test_admin_create_detached_checkpoint_from_source() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 358 | async def test_admin_refresh_checkpoint_updates_lifetime() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 392 | async def test_admin_refresh_checkpoint_without_lifetime() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 412 | async def test_admin_refresh_checkpoint_with_invalid_id_fails() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 427 | async def test_admin_delete_checkpoint_removes_checkpoint() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 452 | async def test_admin_delete_checkpoint_with_invalid_id_fails() -> None: | CODE |
| LOW | bindings/python/tests/test_admin.py | 467 | async def test_admin_delete_multiple_checkpoints() -> None: | CODE |
| LOW | bindings/python/tests/test_logging.py | 10 | async def test_logging_callback_delivery_and_duplicate_init_rejection() -> None: | CODE |
| LOW | bindings/python/tests/test_metrics.py | 115 | async def test_default_metrics_recorder_snapshot_and_lookups() -> None: | CODE |
| LOW | bindings/python/tests/test_metrics.py | 144 | async def test_db_builder_accepts_custom_metrics_recorder() -> None: | CODE |
| LOW | bindings/python/tests/test_metrics.py | 159 | async def test_reader_builder_accepts_default_metrics_recorder() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 32 | async def test_db_lifecycle_and_status() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 55 | async def test_db_status_segments_without_extractor() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 65 | async def test_db_status_segments_with_extractor() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 94 | async def test_db_crud_and_metadata() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 243 | async def test_db_batch_write_and_consumption() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 281 | async def test_db_merge_and_merge_with_options() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 303 | async def test_db_snapshot_isolation() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 340 | async def test_db_invalid_inputs_map_to_typed_errors() -> None: | CODE |
| LOW | bindings/python/tests/test_db.py | 383 | async def test_db_writer_fencing_reports_closed_reason() -> None: | CODE |
| LOW | bindings/python/tests/test_wal_reader.py | 17 | async def test_wal_reader_reports_no_new_files_after_cursor() -> None: | CODE |
| LOW | bindings/python/tests/test_wal_reader.py | 27 | async def test_wal_reader_streams_new_wals_through_one_iterator() -> None: | CODE |
| LOW | bindings/python/tests/test_wal_reader.py | 53 | async def test_wal_reader_decodes_value_tombstone_and_merge_rows() -> None: | CODE |
| LOW | bindings/python/tests/test_wal_reader.py | 72 | async def test_wal_reader_can_start_at_the_next_wal() -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | slatedb/src/transaction_manager.rs | 955 | // Step 1: Create a transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 959 | // Step 2: Simulate conflict detection during transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 965 | // Step 3: Create another transaction that will commit first | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 969 | // Step 4: Commit the other transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 973 | // Step 5: Check for conflicts again - should detect conflict on key1 | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 977 | // Step 6: Commit our transaction despite conflict (simulating retry logic) | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 981 | // Step 7: Verify final state | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 985 | // Step 8: Verify min_active_seq is now None | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | slatedb/src/transaction_manager.rs | 955 | // Step 1: Create a transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 959 | // Step 2: Simulate conflict detection during transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 965 | // Step 3: Create another transaction that will commit first | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 969 | // Step 4: Commit the other transaction | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 973 | // Step 5: Check for conflicts again - should detect conflict on key1 | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 977 | // Step 6: Commit our transaction despite conflict (simulating retry logic) | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 981 | // Step 7: Verify final state | COMMENT |
| LOW⚡ | slatedb/src/transaction_manager.rs | 985 | // Step 8: Verify min_active_seq is now None | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | slatedb-dst/Cargo.toml | 14 | # Disable `libtest` harness because it fights with Criterion's `--output-format bencher` | COMMENT |
| MEDIUM | website/package-lock.json | 6953 | "resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.2.tgz", | CODE |
| MEDIUM | slatedb/Cargo.toml | 136 | # Disable `libtest` harness because it fights with Criterion's `--output-format bencher` | COMMENT |
| MEDIUM | slatedb/src/partitioned_keyspace.rs | 190 | // we could do something more robust here, but its fine since the test cases are | COMMENT |
| MEDIUM | slatedb-bencher/Cargo.toml | 15 | # Disable `libtest` harness because it fights with Criterion's `--output-format bencher` | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bindings/python/tests/test_reader.py | 1 | CODE | |
| LOW | bindings/python/tests/test_admin.py | 1 | CODE | |
| LOW | bindings/python/tests/conftest.py | 1 | CODE | |
| LOW | bindings/python/tests/test_logging.py | 1 | CODE | |
| LOW | bindings/python/tests/test_metrics.py | 1 | CODE | |
| LOW | bindings/python/tests/test_db.py | 1 | CODE | |
| LOW | bindings/python/tests/test_wal_reader.py | 1 | CODE | |
| LOW | bindings/python/slatedb/uniffi/__init__.py | 6 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | slatedb-bencher/benchmark-db.sh | 48 | # Set CLOUD_PROVIDER to local if not already set | COMMENT |
| LOW | slatedb-bencher/benchmark-transaction.sh | 47 | # Set RUST_LOG to INFO level to prevent gigabyte-sized log files | COMMENT |
| LOW | slatedb-bencher/benchmark-transaction.sh | 74 | # Set CLOUD_PROVIDER to local if not already set | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | rfcs/0024-segment-oriented-compaction.md | 661 | - **Composition with projection/union.** [Projection and union](./0004-checkpoints.md#manifest-projection-and-union) ope | CODE |
| MEDIUM | rfcs/0019-change-data-capture.md | 420 | - Githb issue [#249](https://github.com/slatedb/slatedb/issues/249) (CDC Streaming to support data sinks and event drive | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | bindings/python/tests/conftest.py | 175 | except Exception as error: # noqa: BLE001 # pragma: no cover - helper for polling assertions | CODE |