✨ The fundamental numerical library for JavaScript and TypeScript. ✨ ⭐️ Star to support our work!
This report summarizes scanner evidence for stdlib-js/stdlib, a JavaScript project with 6,001 GitHub stars. SynthScan examined 83,890 lines of code across 561 source files, recording 716 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 30.5 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 695 finding(s).
Are imports declared and package/API names verified? 12 finding(s).
Are wrappers, guards, and repeated structures necessary? 9 finding(s).
Which changes need focused human review? 716 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 716 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | azure-pipelines-disabled.yml | 19 | # Define the triggers which will cause a build to run: | COMMENT |
| MEDIUM | azure-pipelines-disabled.yml | 98 | # Define a display name for use in the UI: | COMMENT |
| MEDIUM | azure-pipelines-disabled.yml | 114 | # Define the maximum number of parallel jobs: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 151 | # Define a UI display name: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 154 | # Define a task-specific timeout: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 157 | # Define the Node.js version to install: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 164 | # Define a UI display name: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 167 | # Define a task-specific timeout: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 179 | # Define a UI display name: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 182 | # Define a task-specific timeout: | COMMENT |
| MEDIUM⚡ | azure-pipelines-disabled.yml | 185 | # Define the task inputs: | COMMENT |
| MEDIUM | .travis.yml | 120 | # Define the build steps: | COMMENT |
| MEDIUM | .travis.yml | 125 | # Define the steps to run after completing the build steps: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_related_packages.yml | 44 | # Define a job for updating the related packages section of READMEs: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_related_packages.yml | 47 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_related_packages.yml | 53 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_related_packages.yml | 56 | # Define the sequence of job steps... | COMMENT |
| MEDIUM | .github/workflows/markdown_related_packages.yml | 155 | # Create a pull request with the changes: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_equations.yml | 39 | # Define a job for updating equations in Markdown files... | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_equations.yml | 42 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_equations.yml | 48 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_equations.yml | 51 | # Define the sequence of job steps... | COMMENT |
| MEDIUM | .github/workflows/markdown_equations.yml | 193 | # Create a pull request with the updated equations: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 48 | # Define a job for running unit tests on macOS... | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 51 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 57 | # Define the type of virtual host machine on which to run the job: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 75 | # Define the build matrix strategy... | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 81 | # Define the build matrix: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 84 | # Define the list of build tasks: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 87 | # Define the list of Node.js versions: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 92 | # Define the list of operating systems: | COMMENT |
| MEDIUM | .github/workflows/macos_test.yml | 133 | # Define the sequence of job steps... | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 243 | # Define a name for the uploaded artifact (ensuring a unique name for each job): | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 253 | # Define a job for sending notifications to Zulip... | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 256 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/macos_test.yml | 259 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM | .github/workflows/macos_test.yml | 274 | # Define the sequence of job steps... | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 50 | # Define a job for running benchmarks on Linux... | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 53 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 56 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 78 | # Define the build matrix strategy... | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 84 | # Define the build matrix: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 87 | # Define the list of build tasks: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 90 | # Define the list of Node.js versions on which to run this job: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 93 | # Define the list of operating systems on which to run this job: | COMMENT |
| MEDIUM | .github/workflows/linux_benchmark.yml | 134 | # Define the sequence of job steps... | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 257 | # Define a name for the uploaded artifact (ensuring a unique name for each job): | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 267 | # Define a job for sending notifications to Zulip... | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 270 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/linux_benchmark.yml | 273 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM | .github/workflows/linux_benchmark.yml | 288 | # Define the sequence of job steps... | COMMENT |
| MEDIUM | .github/workflows/git_note_filter_packages.yml | 26 | # Define the input parameters for the workflow: | COMMENT |
| MEDIUM | .github/workflows/git_note_filter_packages.yml | 39 | # Define the input parameters for the workflow: | COMMENT |
| MEDIUM | .github/workflows/git_note_filter_packages.yml | 50 | # Define the secrets accessible by the workflow: | COMMENT |
| MEDIUM⚡ | .github/workflows/git_note_filter_packages.yml | 65 | # Define a job to create a Git note amending a commit message: | COMMENT |
| MEDIUM⚡ | .github/workflows/git_note_filter_packages.yml | 71 | # Define the type of virtual host machine: | COMMENT |
| MEDIUM⚡ | .github/workflows/git_note_filter_packages.yml | 74 | # Define the sequence of job steps: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_tocs.yml | 39 | # Define a job for updating namespace table of contents... | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_tocs.yml | 42 | # Define a display name: | COMMENT |
| MEDIUM⚡ | .github/workflows/markdown_tocs.yml | 48 | # Define the type of virtual host machine: | COMMENT |
| 512 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .codecov.yml | 1 | #/ | COMMENT |
| LOW | azure-pipelines-disabled.yml | 1 | #/ | COMMENT |
| LOW | .travis.yml | 1 | #/ | COMMENT |
| LOW | tools/snippets/benchmark/python/benchmark.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | tools/snippets/benchmark/python/numpy/benchmark.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | tools/snippets/benchmark/python/scipy/benchmark.py | 1 | #!/usr/bin/env python | COMMENT |
| LOW | tools/snippets/benchmark/r/benchmark.R | 1 | #!/usr/bin/env Rscript | COMMENT |
| LOW | tools/snippets/benchmark/r/benchmark.R | 41 | #' | COMMENT |
| LOW | tools/snippets/benchmark/r/benchmark.R | 61 | #' @examples | COMMENT |
| LOW | tools/lint/r/linter.R | 1 | #!/usr/bin/env Rscript | COMMENT |
| LOW | tools/scripts/install_r_pkgs.R | 1 | #!/usr/bin/env Rscript | COMMENT |
| LOW | .github/labeler.yml | 1 | #/ | COMMENT |
| LOW | .github/dependabot.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/markdown_related_packages.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/markdown_equations.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/macos_test.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/macos_test.yml | 101 | NPM_VERSION: '>2.7.0 <10.0.0' | COMMENT |
| LOW | .github/workflows/linux_benchmark.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/git_note_filter_packages.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/markdown_tocs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/check_merge_conflicts_prs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/track_todos.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/linux_test.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/process_metadata.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/labeler.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/lint_copyright_years.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/generate_monthly_changelog.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/macos_test_cov.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/check_duplicate_prs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/standalone_publish.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/check_licenses.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/too_many_good_first_prs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/pr_commands_comment.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/publish_coverage_pr.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/codeql.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/codeql.yml | 41 | COMMENT | |
| LOW | .github/workflows/codeql.yml | 81 | # CodeQL supports the following languages: | COMMENT |
| LOW | .github/workflows/update_error_databases.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/create_todo_issue.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/lint_random_files.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/update_repl_docs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/check_tracking_issue_closure.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/pr_merge_develop.yml | 1 | #/ | COMMENT |
| LOW | …hub/workflows/create_address_commit_comment_issues.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/lint_pr_title.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/namespace_declarations.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/macos_benchmark.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/standalone_publish_custom.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/check_required_files.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/terminal.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/merge_ready_prs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/update_pr_copyright_years.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/markdown_pkg_urls.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/ossf_scorecard.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/standalone_push_changes.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/generate_pr_commit_message.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/linux_test_install.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/label_good_first_prs.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/run_tests_coverage_pr.yml | 1 | #/ | COMMENT |
| LOW | .github/workflows/slash_commands.yml | 1 | #/ | COMMENT |
| 39 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/snippets/benchmark/python/benchmark.py | 0 | print the benchmark summary. # arguments * `total`: total number of tests * `passing`: number of passing tests | STRING |
| HIGH | tools/snippets/benchmark/python/numpy/benchmark.py | 0 | print the benchmark summary. # arguments * `total`: total number of tests * `passing`: number of passing tests | STRING |
| HIGH | tools/snippets/benchmark/python/scipy/benchmark.py | 0 | print the benchmark summary. # arguments * `total`: total number of tests * `passing`: number of passing tests | STRING |
| HIGH | tools/snippets/benchmark/python/benchmark.py | 0 | print benchmark results. # arguments * `iterations`: number of iterations * `elapsed`: elapsed time (in seconds) # examp | STRING |
| HIGH | tools/snippets/benchmark/python/numpy/benchmark.py | 0 | print benchmark results. # arguments * `iterations`: number of iterations * `elapsed`: elapsed time (in seconds) # examp | STRING |
| HIGH | tools/snippets/benchmark/python/scipy/benchmark.py | 0 | print benchmark results. # arguments * `iterations`: number of iterations * `elapsed`: elapsed time (in seconds) # examp | STRING |
| HIGH | tools/snippets/benchmark/python/benchmark.py | 0 | run the benchmark and print benchmark results. # arguments * `name`: benchmark name (suffix) * `setup`: benchmark setup | STRING |
| HIGH | tools/snippets/benchmark/python/numpy/benchmark.py | 0 | run the benchmark and print benchmark results. # arguments * `name`: benchmark name (suffix) * `setup`: benchmark setup | STRING |
| HIGH | tools/snippets/benchmark/python/scipy/benchmark.py | 0 | run the benchmark and print benchmark results. # arguments * `name`: benchmark name (suffix) * `setup`: benchmark setup | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CONTRIBUTING.md | 107 | #### Step 0: GitHub | COMMENT |
| LOW | CONTRIBUTING.md | 111 | #### Step 1: Fork | COMMENT |
| LOW | CONTRIBUTING.md | 165 | #### Step 2: Initial Setup | COMMENT |
| LOW | CONTRIBUTING.md | 185 | #### Step 3: Branch | COMMENT |
| LOW⚡ | CONTRIBUTING.md | 197 | #### Step 4: Write | COMMENT |
| LOW⚡ | CONTRIBUTING.md | 201 | #### Step 5: Commit | COMMENT |
| LOW | CONTRIBUTING.md | 223 | #### Step 6: Sync | COMMENT |
| LOW | CONTRIBUTING.md | 239 | #### Step 7: Test | COMMENT |
| LOW | CONTRIBUTING.md | 257 | #### Step 8: Push | COMMENT |
| LOW | CONTRIBUTING.md | 269 | #### Step 9: Pull Request | COMMENT |
| LOW | CONTRIBUTING.md | 321 | #### Step 10: Land | COMMENT |
| LOW | CONTRIBUTING.md | 327 | #### Step 11: Celebrate | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/lint_copyright_years.yml | 100 | # Check if file contains stdlib copyright notice: | COMMENT |
| LOW | .github/workflows/update_error_databases.yml | 93 | # Check if there are any changes to the error databases: | COMMENT |
| LOW | .github/workflows/update_error_databases.yml | 120 | # Check if the table length exceeds a maximum length: | COMMENT |
| LOW | .github/workflows/namespace_declarations.yml | 132 | # Check if there are changes: | COMMENT |
| LOW⚡ | .github/workflows/check_required_files.yml | 153 | # Iterate over the list of required files: | COMMENT |
| LOW | .github/workflows/generate_pr_commit_message.yml | 90 | # Check if the commit message already exists in the PR comments: | COMMENT |
| LOW⚡ | .github/workflows/slash_commands.yml | 340 | # Check if any previous job failed and post a comment: | COMMENT |
| LOW | .github/workflows/update_math_scaffold_databases.yml | 99 | # Check if there are any changes to the unary database: | COMMENT |
| LOW | .github/workflows/lint_changed_files.yml | 410 | # Check if the test file exists and isn't already in the list: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | CONTRIBUTING.md | 208 | $ git config --global user.name "Jane Doe" | CODE |
| LOW | etc/eslint/rules/stdlib.js | 1332 | * * ## Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1332 | * * ## Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1351 | * * ## Lorem ipsum dolor sit amet, consectetuer adipiscing elit | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1351 | * * ## Lorem ipsum dolor sit amet, consectetuer adipiscing elit | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1379 | * * Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget * dolor. Aenean massa. | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1379 | * * Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Aenean commodo ligula eget * dolor. Aenean massa. | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1395 | * * Lorem ipsum dolor sit amet, consectetuer adipiscing elit. | COMMENT |
| LOW | etc/eslint/rules/stdlib.js | 1395 | * * Lorem ipsum dolor sit amet, consectetuer adipiscing elit. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/make/lib/scaffold/README.md | 47 | #### scaffold | COMMENT |
| MEDIUM⚡ | .github/workflows/update_math_scaffold_databases.yml | 47 | # Define a job for updating databases which are used for scaffolding mathematical packages... | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/snippets/benchmark/python/benchmark.py | 21 | CODE | |
| LOW | tools/snippets/benchmark/python/numpy/benchmark.py | 21 | CODE | |
| LOW | tools/snippets/benchmark/python/scipy/benchmark.py | 21 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | etc/eslint/rules/typescript.js | 437 | * export function doSomething() {} | COMMENT |