AI Slop Code Risk Monitor

syncthing/syncthing

SlopCodeMonitor badge for syncthing/syncthing Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

Open Source Continuous File Synchronization

0.6 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for syncthing/syncthing, a Go project with 89,920 GitHub stars. SynthScan examined 156,232 lines of code across 755 source files, recording 67 pattern matches distributed across 6 syntactic categories. The legacy adjusted pattern signal is 0.6 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

0.6
Adjusted Signal
0.6
Raw Pattern Score
100%
Time Factor
2026-10-29
Last Push
89.9K
Stars
Go
Language
156.2K
Lines of Code
755
Files
67
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 1.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 54 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.9/100 · LOW

Are imports declared and package/API names verified? 13 finding(s).

Agent Over-Engineering Ratio 0.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 3 finding(s).

PR Review Velocity Impact 2.6/100 · LOW

Which changes need focused human review? 67 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 0MEDIUM 3LOW 63

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 67 distinct pattern matches across 6 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block47 hits · 47 pts
SeverityFileLineSnippetContext
LOWcmd/infra/strelaypoolsrv/auto/doc.go1// Copyright (C) 2018 The Syncthing Authors.COMMENT
LOWcmd/infra/stcrashreceiver/main.go1// Copyright (C) 2019 The Syncthing Authors.COMMENT
LOWinternal/db/olddb/set.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWinternal/db/olddb/backend/backend.go41type ReadTransaction interface {COMMENT
LOWinternal/db/olddb/backend/backend.go61type WriteTransaction interface {COMMENT
LOWinternal/db/olddb/backend/backend.go81// // ...COMMENT
LOWscript/authors.go41const authorsHeader = `# This is the official list of Syncthing authors for copyright purposes.COMMENT
LOWgui/default/syncthing/core/syncthingController.js1181 }COMMENT
LOW.github/FUNDING.yml1github: syncthingCOMMENT
LOWlib/upgrade/signingkey.go1// Copyright (C) 2015 The Syncthing Authors.COMMENT
LOWlib/config/wrapper.go41// called for each subscribing object that implements it, with copies of theCOMMENT
LOWlib/upnp/igd_service.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
LOWlib/upnp/igd_service.go21// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOTCOMMENT
LOWlib/upnp/upnp.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/upnp/upnp.go21// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOTCOMMENT
LOWlib/upnp/upnp.go361 // Figure out our IPv4 address on the interface used to reach the IGD.COMMENT
LOWlib/protocol/bep_fileinfo.go481// - modification time (difference bigger than modTimeWindow)COMMENT
LOWlib/protocol/protocol.go121 Index(ctx context.Context, idx *Index) errorCOMMENT
LOWlib/protocol/doc.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/dialer/empty_test.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
LOWlib/connections/service.go1421// to be unique for each connection and chronologically sortable. It isCOMMENT
LOWlib/watchaggregator/aggregator.go401 // Deletes should in general be scanned last, therefore they are delayed byCOMMENT
LOWlib/model/doc.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/model/indexhandler.go101 // This is the other side's description of themselves. WeCOMMENT
LOWlib/model/model.go2361 // e.g. if multiple connections to a single device are closed.COMMENT
LOWlib/model/folder_sendrecv.go681// checkParent verifies that the thing we are handling lives inside a directory,COMMENT
LOWlib/model/folder_sendrecv.go1121// This is the flow of data and events here, I think...COMMENT
LOWlib/model/folder_sendrecv.go1141// | | +-----------------------+COMMENT
LOWlib/model/sharedpullerstate.go161 // permissions will be set to the final value later, but in the meantimeCOMMENT
LOWlib/model/sharedpullerstate.go201 if s.sparse && !s.file.IsSymlink() {COMMENT
LOWlib/osutil/lowprio_linux.go21 // (default) and 19 (worst priority). But then, this is Linux, so ofCOMMENT
LOWlib/osutil/lowprio_linux.go41 if cur, err := syscall.Getpriority(syscall.PRIO_PROCESS, 0); err == nil && cur <= wantNiceLevel {COMMENT
LOWlib/api/api.go541func corsMiddleware(next http.Handler, allowFrameLoading bool) http.Handler {COMMENT
LOWlib/api/auto/doc.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/relay/protocol/empty_test.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
LOWlib/relay/client/empty_test.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
LOWlib/fs/fakefs.go41// following properties:COMMENT
LOWlib/fs/fakefs.go801 //COMMENT
LOWlib/fs/folding_test.go21 {"IJssel", "ijssel"},COMMENT
LOWlib/fs/types.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
LOWlib/fs/walkfs.go41 if ancestors.fs.SameFile(info, ancestor) {COMMENT
LOWlib/fs/util.go81}COMMENT
LOWlib/fs/basicfs_watch_notkqueue.go1// Copyright (C) 2022 The Syncthing Authors.COMMENT
LOWlib/scanner/doc.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/scanner/walk.go41 // If CurrentFiler is not nil, it is queried for the current file before rescanning.COMMENT
LOWlib/beacon/doc.go1// Copyright (C) 2014 The Syncthing Authors.COMMENT
LOWlib/pmp/empty_test.go1// Copyright (C) 2016 The Syncthing Authors.COMMENT
Fake / Example Data12 hits · 19 pts
SeverityFileLineSnippetContext
LOWCONTRIBUTING.md54 $ git config --global user.name "Jane Doe"CODE
LOWlib/discover/manager.go7//go:generate go tool counterfeiter -o mocks/manager.go --fake-name Manager . ManagerCOMMENT
LOWlib/config/wrapper.go7//go:generate go tool counterfeiter -o mocks/mocked_wrapper.go --fake-name Wrapper . WrapperCOMMENT
LOW⚡lib/protocol/protocol.go8//go:generate go tool counterfeiter -o mocked_connection_info_test.go --fake-name mockedConnectionInfo . ConnectionInfoCOMMENT
LOW⚡lib/protocol/protocol.go11//go:generate go tool counterfeiter -o mocks/connection_info.go --fake-name ConnectionInfo . ConnectionInfoCOMMENT
LOW⚡lib/protocol/protocol.go12//go:generate go tool counterfeiter -o mocks/connection.go --fake-name Connection . ConnectionCOMMENT
LOWlib/connections/service.go7//go:generate go tool counterfeiter -o mocks/service.go --fake-name Service . ServiceCOMMENT
LOWlib/model/folder_summary.go7//go:generate go tool counterfeiter -o mocks/folderSummaryService.go --fake-name FolderSummaryService . FolderSummarySerCOMMENT
LOWlib/model/model.go7//go:generate go tool counterfeiter -o mocks/model.go --fake-name Model . ModelCOMMENT
LOWlib/events/events.go7//go:generate go tool counterfeiter -o mocks/buffered_subscription.go --fake-name BufferedSubscription . BufferedSubscriCOMMENT
LOWlib/scanner/walk_test.go160 data := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et CODE
LOWlib/scanner/walk_test.go160 data := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et CODE
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICALgui/default/syncthing/core/syncthingController.js3282 return $scope.advancedConfig.defaults.ignores.lines.join('\n');CODE
AI Slop Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUMbuild.go540 // https://github.com/go-delve/delve/issues/79COMMENT
MEDIUMgui/default/syncthing/core/localeService.js41 // @TODO: check if there is nice way to utilize window.navigator.languages or similar api.COMMENT
MEDIUMlib/versioner/trashcan.go137 // If a deleted file was restored, even though the RenameOrCopy method is robust, check if the file exists andCOMMENT
Hyper-Verbose Identifiers3 hits · 3 pts
SeverityFileLineSnippetContext
LOWgui/default/syncthing/core/syncthingController.js916 function shouldSetDefaultFolderPath() {CODE
LOWgui/default/syncthing/core/syncthingController.js1165 function progressIntegerPercentage(current, total) {CODE
LOWgui/default/syncthing/core/syncthingController.js2747 function saveFolderIgnoresExisting() {CODE
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscript/docker-entrypoint.sh10 # If Syncthing should have no extra capabilities, make sure to remove themCOMMENT