AI Slop Code Risk Monitor

steveicarus/iverilog

SlopCodeMonitor badge for steveicarus/iverilog Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Icarus Verilog

1.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for steveicarus/iverilog, a C++ project with 3,709 GitHub stars. SynthScan examined 136,059 lines of code across 1399 source files, recording 148 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 1.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.3
Adjusted Signal
1.3
Raw Pattern Score
100%
Time Factor
2026-11-01
Last Push
3.7K
Stars
C++
Language
136.1K
Lines of Code
1.4K
Files
148
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 5.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 141 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 0 finding(s).

Agent Over-Engineering Ratio 1.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 9 finding(s).

PR Review Velocity Impact 6.3/100 · LOW

Which changes need focused human review? 148 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 4MEDIUM 4LOW 140

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 148 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block128 hits · 128 pts
SeverityFileLineSnippetContext
LOWPExpr.h81 // This operation must be performed by the parser, to ensure thatCOMMENT
LOWPExpr.h101 //COMMENT
LOWPExpr.h121 // as an integer. The lossless width calculation is inadequate inCOMMENT
LOWPExpr.h161 // This is the more generic form of the elaborate_expr methodCOMMENT
LOWivl_target.h21COMMENT
LOWivl_alloc.h21#ifdef __cplusplusCOMMENT
LOWnetlist.h21 */COMMENT
LOWnetlist.h41# include "nettypes.h"COMMENT
LOWnetlist.h2221 // This method returns true if the expression isCOMMENT
LOWnetlist.h2241 // This method evaluates the expression and returns anCOMMENT
LOWnetlist.h2261 // a signal that reads from its input.COMMENT
LOWnetlist.h2881 // of the function call, and is used for error messages. TheCOMMENT
LOWnetlist.h2901 //COMMENT
LOWnetlist.h2921 // Synthesize as synchronous logic, and return true on success.COMMENT
LOWivl_dlfcn.h21COMMENT
LOWpform.h21COMMENT
LOWStatement.h21COMMENT
LOWpform_types.h21COMMENT
LOWnetclass.h41 // Set the property of the class during elaboration. Set theCOMMENT
LOWacc_user.h61#define accTopModule 224COMMENT
LOWacc_user.h81COMMENT
LOWacc_user.h101#define accSimTime 2COMMENT
LOWPScope.h81 // Symbols that are explicitly imported. This contains the package whereCOMMENT
LOWsv_vpi_user.h21COMMENT
LOWsv_vpi_user.h41#endifCOMMENT
LOWModule.h21COMMENT
LOWveriuser.h41COMMENT
LOWveriuser.h61 */COMMENT
LOWveriuser.h161#define userrealfunction 3COMMENT
LOWveriuser.h181#define TF_STRING tf_stringCOMMENT
LOWveriuser.h221#define tf_reg_node 101COMMENT
LOWvpi_user.h21COMMENT
LOWvpi_user.h241/* These are valid codes for the format of the t_vpi_value structure. */COMMENT
LOWvpi_user.h261#define vpiX 3COMMENT
LOWvpi_user.h281#define vpiIterator 27COMMENT
LOWvpi_user.h301#define vpiTask 59COMMENT
LOWvpi_user.h321COMMENT
LOWvpi_user.h341#define vpiTimePrecision 12COMMENT
LOWvpi_user.h361# define vpiTriReg 7COMMENT
LOWvpi_user.h381# define vpiRealConst 2COMMENT
LOWvpi_user.h401#define vpiLocalParam 70COMMENT
LOWvpi_user.h481#define cbForce 3COMMENT
LOWvpi_user.h681#define BR916_STOPGAP_FIXCOMMENT
LOWvhdlpp/vtype.h61 // this type. This method is used for example to compareCOMMENT
LOWvhdlpp/expression.h81 // This virtual method handles the special case of elaboratingCOMMENT
LOWvhdlpp/expression.h101COMMENT
LOWvhdlpp/expression.h121 virtual int emit(std::ostream&out, Entity*ent, ScopeBase*scope) const =0;COMMENT
LOWDocumentation/conf.py1# -*- coding: utf-8 -*-COMMENT
LOWDocumentation/conf.py41extensions = [COMMENT
LOWDocumentation/conf.py101# relative to this directory. They are copied after the builtin static files,COMMENT
LOWDocumentation/conf.py121htmlhelp_basename = 'IcarusVerilogdoc'COMMENT
LOWdriver/main.c61#ifdef HAVE_SYS_WAIT_HCOMMENT
LOWdriver/main.c81#if defined(__MINGW32__) && !defined(HAVE_GETOPT_H)COMMENT
LOWvvp/vvp_net.h21COMMENT
LOWvvp/vvp_net_sig.h21COMMENT
LOWvpi/wavealloca.h21 *COMMENT
LOWvpi/wavealloca.h41#endifCOMMENT
LOWvpi/lxt_write.h21 */COMMENT
LOWvpi/lxt_write.h101#define LT_SECTION_DOUBLE_TEST (8)COMMENT
LOWvpi/lz4.h81* Enable exporting of functions when building a Windows DLLCOMMENT
68 more matches not shown…
Empty Error Handlers4 hits · 20 pts
SeverityFileLineSnippetContext
HIGHivtest/run_ivl.py63except FileExistsError:CODE
HIGHivtest/run_ivl.py68except FileNotFoundError:CODE
HIGHivtest/run_ivl.py73except FileExistsError:CODE
HIGHivtest/run_ivl.py78except FileNotFoundError:CODE
Redundant / Tautological Comments7 hits · 10 pts
SeverityFileLineSnippetContext
LOWivtest/vhdl_reg.pl108 # Check if the system command core dumped!COMMENT
LOWivtest/vhdl_reg.pl142 # Check if the system command core dumped!COMMENT
LOWivtest/vlog95_reg.pl133 # Check if the system command core dumped!COMMENT
LOWivtest/vlog95_reg.pl195 # Check if the system command core dumped!COMMENT
LOWivtest/vlog95_reg.pl214 # Check if the system command core dumped!COMMENT
LOWivtest/vvp_reg.pl144 # Check if the system command core dumped!COMMENT
LOWivtest/vvp_reg.pl183 # Check if the system command core dumped!COMMENT
Excessive Try-Catch Wrapping3 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMivtest/obsolete/sregress.pl74 print("Error - Command line option file $num_opts doesn't exist.\n");CODE
MEDIUMivtest/obsolete/eregress.pl28 print("Error - Command line option file $num_opts doesn't exist.\n");CODE
MEDIUMivtest/obsolete/vvptests/vvp.pl49 print("Error - Command line option file $num_opts doesn't exist.\n");CODE
AI Slop Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMnetlist.h2243 // time knows how. Essentially, this is designed to foldCOMMENT
Deep Nesting3 hits · 3 pts
SeverityFileLineSnippetContext
LOWivtest/flow_reg.py156CODE
LOWivtest/vvp_reg.py51CODE
LOWivtest/vvp_reg.py81CODE
AI Structural Patterns2 hits · 2 pts
SeverityFileLineSnippetContext
LOWivtest/run_ivl.py85CODE
LOWivtest/run_ivl.py133CODE