Home / thephpleague / commonmark
AI Slop Code RIsk Monitor

thephpleague/commonmark

Highly-extensible PHP Markdown parser which fully supports the CommonMark and GFM specs.

6.4 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for thephpleague/commonmark, a PHP project with 2,981 GitHub stars. SynthScan examined 64,125 lines of code across 908 source files, recording 395 pattern matches distributed across 5 syntactic categories. The legacy adjusted pattern signal is 6.4 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

6.4
Adjusted Signal
6.4
Raw Pattern Score
100%
Time Factor
2026-10-11
Last Push
3.0K
Stars
PHP
Language
64.1K
Lines of Code
908
Files
395
Pattern Hits
2026-10-12
Scan Date
0.00
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 23.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 351 finding(s).

Hallucinated Dependency & Supply Chain Risk 4.5/100 · LOW

Are imports declared and package/API names verified? 44 finding(s).

Agent Over-Engineering Ratio 23.4/100 · LOW

Are wrappers, guards, and repeated structures necessary? 343 finding(s).

PR Review Velocity Impact 26.5/100 · MEDIUM

Which changes need focused human review? 395 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 395

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 395 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers343 hits · 341 pts
SeverityFileLineSnippetContext
LOWtests/unit/GithubFlavoredMarkdownConverterTest.php40 public function testConfigOnlyConstructor(): voidCODE
LOWtests/unit/GithubFlavoredMarkdownConverterTest.php58 public function testGetEnvironmentReturnsMainEnvironmentClass(): voidCODE
LOWtests/unit/MarkdownConverterTest.php27 public function testConstructorAndGetEnvironment(): voidCODE
LOWtests/unit/MarkdownConverterTest.php36 public function testInvokeReturnsSameOutputAsConvert(): voidCODE
LOWtests/unit/CommonMarkConverterTest.php38 public function testConstructorWithConfig(): voidCODE
LOWtests/unit/CommonMarkConverterTest.php58 public function testInvokeReturnsSameOutputAsConvert(): voidCODE
LOWtests/unit/CommonMarkConverterTest.php67 public function testGetEnvironmentReturnsMainEnvironmentClass(): voidCODE
LOWtests/unit/Renderer/HtmlRendererTest.php19 public function testRenderDocumentCallsDocumentRenderer(): voidCODE
LOWtests/unit/Renderer/HtmlRendererTest.php33 public function testRenderNodesWithBlocks(): voidCODE
LOWtests/unit/Renderer/HtmlRendererTest.php51 public function testRenderNodesWithInlines(): voidCODE
LOWtests/unit/Renderer/HtmlRendererTest.php69 public function testRenderNodesFallsBackWhenFirstRendererReturnsNull(): voidCODE
LOWtests/unit/Renderer/HtmlRendererTest.php87 public function testRenderNodesWithMissingRenderer(): voidCODE
LOWtests/unit/Renderer/Inline/TextRendererTest.php46 public function testRenderWithInvalidType(): voidCODE
LOWtests/unit/Renderer/Inline/NewlineRendererTest.php61 public function testRenderWithInvalidType(): voidCODE
LOWtests/unit/Renderer/Block/ParagraphRendererTest.php51 public function testRenderWithInvalidType(): voidCODE
LOWtests/unit/Renderer/Block/DocumentRendererTest.php59 public function testRenderWithInvalidType(): voidCODE
LOWtests/unit/Extension/Embed/EmbedProcessorTest.php43 public function testNoUpdatesEmbedsWithoutEmbeds(): voidCODE
LOWtests/unit/Extension/Embed/EmbedTest.php21 public function testConstructorGettersAndSetters(): voidCODE
LOW…nsion/SmartPunct/ReplaceUnpairedQuotesListenerTest.php35 public function testWithConsecutiveMerging(array $paragraphNodes, string $expectedText): voidCODE
LOW…nsion/SmartPunct/ReplaceUnpairedQuotesListenerTest.php87 public function testWhenMergingNotPossible(): voidCODE
LOWtests/unit/Extension/Highlight/MarkRendererTest.php48 public function testRenderWithInvalidNodeType(): voidCODE
LOW…scriptionList/Renderer/DescriptionListRendererTest.php48 public function testRenderWithInvalidType(): voidCODE
LOW…scriptionList/Renderer/DescriptionTermRendererTest.php46 public function testRenderWithInvalidType(): voidCODE
LOW…n/DescriptionList/Renderer/DescriptionRendererTest.php46 public function testRenderWithInvalidType(): voidCODE
LOW…nit/Extension/DescriptionList/Node/DescriptionTest.php21 public function testTightnessConstructorGetterAndSetter(): voidCODE
LOW…s/unit/Extension/FrontMatter/FrontMatterParserTest.php41 public function testWithFrontMatterThatsJustAString(): voidCODE
LOW…s/unit/Extension/FrontMatter/FrontMatterParserTest.php77 public function testWithInvalidFrontMatterDelimiters(): voidCODE
LOW…FrontMatter/Input/MarkdownInputWithFrontMatterTest.php21 public function testConstructorAndGetters(): voidCODE
LOW…ntMatter/Output/RenderedContentWithFrontMatterTest.php22 public function testConstructorAndGetters(): voidCODE
LOW…/FrontMatter/Data/SymfonyYamlFrontMatterParserTest.php63 public static function provideInvalidYamlExamples(): iterableCODE
LOW…/FrontMatter/Data/SymfonyYamlFrontMatterParserTest.php72 private static function yamlLibrarySupportsObjectUnserialization(): boolCODE
LOW…ion/HeadingPermalink/HeadingPermalinkProcessorTest.php31 public function testUsesDefaultSlugNormalizer(): voidCODE
LOW…ion/HeadingPermalink/HeadingPermalinkProcessorTest.php49 public function testCustomSlugNormalizerOption(): voidCODE
LOW…ion/HeadingPermalink/HeadingPermalinkProcessorTest.php82 public function testInvalidSlugNormalizerOption(): voidCODE
LOW…ion/HeadingPermalink/HeadingPermalinkProcessorTest.php96 public function testDuplicateSlugsAreMadeUnique(): voidCODE
LOW…nit/Extension/Attributes/Util/AttributesHelperTest.php43 public static function dataForTestParseAttributes(): iterableCODE
LOW…nit/Extension/Attributes/Util/AttributesHelperTest.php134 public static function dataForTestMergeAttributes(): iterableCODE
LOW…nit/Extension/Attributes/Util/AttributesHelperTest.php217 public static function dataForTestFilterAttributes(): iterableCODE
LOW…/Extension/Attributes/Event/AttributesListenerTest.php37 public function testSeededClassWithoutAnyClasses(string $markdown, $seededClass, string $expected): voidCODE
LOW…/Extension/Attributes/Event/AttributesListenerTest.php56 public static function dataForTestSeededClassWithoutAnyClasses(): iterableCODE
LOW…/Extension/TaskList/TaskListItemMarkerRendererTest.php56 public function testWithInvalidInlineElement(): voidCODE
LOWtests/unit/Extension/Table/TableCellTest.php26 public function testTypeConstructorArgument(): voidCODE
LOWtests/unit/Extension/Table/TableCellTest.php45 public function testAlignConstructorArgument(): voidCODE
LOWtests/unit/Extension/Table/TableCellRendererTest.php25 public function testRenderWithTableHeader(): voidCODE
LOWtests/unit/Extension/Table/TableCellRendererTest.php51 public function testRenderWithTableCellHavingAlignment(): voidCODE
LOWtests/unit/Extension/Table/TableCellRendererTest.php64 public function testRenderWithTableCellWithCustomAttributes(): voidCODE
LOWtests/unit/Extension/Table/TableSectionRendererTest.php26 public function testRenderWithTableSection(): voidCODE
LOWtests/unit/Extension/Table/TableSectionRendererTest.php40 public function testRenderWithEmptyTableSection(): voidCODE
LOW…n/NormalizeHeadings/NormalizeHeadingsProcessorTest.php48 public static function provideNormalizationCases(): iterableCODE
LOW…n/NormalizeHeadings/NormalizeHeadingsProcessorTest.php93 public function testThrowsExceptionWhenMinLevelExceedsMaxLevel(): voidCODE
LOWtests/unit/Extension/Mention/MentionTest.php22 public function testConstructorAndGetters(): voidCODE
LOWtests/unit/Extension/Mention/MentionTest.php38 public function testConstructorAndGettersWithCustomLabel(): voidCODE
LOWtests/unit/Extension/Mention/MentionTest.php84 public function testLabelFunctionsWhenLabelDetached(): voidCODE
LOW…/Extension/Mention/Generator/CallbackGeneratorTest.php56 public function testWithAbstractInlineReturn(): voidCODE
LOW…/Extension/Mention/Generator/CallbackGeneratorTest.php75 public function testWithNoUrlMentionReturn(): voidCODE
LOW…/Extension/Mention/Generator/CallbackGeneratorTest.php89 public function testWithNewMentionButNoUrlReturn(): voidCODE
LOW…t/Extension/ExternalLink/ExternalLinkProcessorTest.php87 public static function dataProviderForTestHostMatches(): iterableCODE
LOW…t/Extension/ExternalLink/ExternalLinkProcessorTest.php126 public static function dataProviderForTestRelOptions(): iterableCODE
LOW…on/DisallowedRawHtml/DisallowedRawHtmlRendererTest.php57 public static function dataProviderForTestWithDefaultSettings(): iterableCODE
LOW…on/DisallowedRawHtml/DisallowedRawHtmlRendererTest.php120 public static function dataProviderForTestWithCustomSettings(): iterableCODE
283 more matches not shown…
Fake / Example Data44 hits · 59 pts
SeverityFileLineSnippetContext
LOW⚡tests/benchmark/sample.md254 > This is a blockquote with two paragraphs. Lorem ipsum dolor sit amet,CODE
LOW⚡tests/benchmark/sample.md254 > This is a blockquote with two paragraphs. Lorem ipsum dolor sit amet,CODE
LOW⚡tests/benchmark/sample.md264 > This is a blockquote with two paragraphs. Lorem ipsum dolor sit amet,CODE
LOW⚡tests/benchmark/sample.md264 > This is a blockquote with two paragraphs. Lorem ipsum dolor sit amet,CODE
LOW⚡tests/benchmark/sample.md363 * Lorem ipsum dolor sit amet, consectetuer adipiscing elit.COMMENT
LOW⚡tests/benchmark/sample.md363 * Lorem ipsum dolor sit amet, consectetuer adipiscing elit.COMMENT
LOW⚡tests/benchmark/sample.md371 * Lorem ipsum dolor sit amet, consectetuer adipiscing elit.COMMENT
LOW⚡tests/benchmark/sample.md371 * Lorem ipsum dolor sit amet, consectetuer adipiscing elit.COMMENT
LOWtests/benchmark/sample.md407 1. This is a list item with two paragraphs. Lorem ipsum dolorCODE
LOWtests/benchmark/sample.md424 only required to indent the first line. Lorem ipsum dolorCODE
LOWtests/pathological/test.php466 'position' => 'placeholder',CODE
LOWtests/pathological/test.php467 'placeholder' => '[TOC]',CODE
LOWtests/functional/Extension/DescriptionList/spec.txt316: This is a description with two paragraphs. Lorem ipsumCODE
LOWtests/functional/Extension/DescriptionList/spec.txt317 dolor sit amet, consectetuer adipiscing elit. AliquamCODE
LOWtests/functional/Extension/DescriptionList/spec.txt345<dd><p>This is a description with two paragraphs. Lorem ipsumCODE
LOWtests/functional/Extension/DescriptionList/spec.txt346dolor sit amet, consectetuer adipiscing elit. AliquamCODE
LOW…sion/DescriptionList/DescriptionListRegressionTest.php36[Lorem ipsum dolor sit amet][foo], consectetur adipiscing elit. Cras vitaeCODE
LOW…sion/DescriptionList/DescriptionListRegressionTest.php36[Lorem ipsum dolor sit amet][foo], consectetur adipiscing elit. Cras vitaeCODE
LOW…sion/DescriptionList/DescriptionListRegressionTest.php47<p><a href="https://example.com">Lorem ipsum dolor sit amet</a>, consectetur adipiscing elit. Cras vitaeCODE
LOW…sion/DescriptionList/DescriptionListRegressionTest.php47<p><a href="https://example.com">Lorem ipsum dolor sit amet</a>, consectetur adipiscing elit. Cras vitaeCODE
LOW…nsion/TableOfContents/TableOfContentsExtensionTest.php55 return ['table_of_contents' => ['position' => 'placeholder', 'placeholder' => '[TOC]']];CODE
LOW⚡docs/1.x/extensions/footnotes.md28Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi[^note1] leo risus, porta ac consectetur ac.CODE
LOW⚡docs/1.x/extensions/footnotes.md28Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi[^note1] leo risus, porta ac consectetur ac.CODE
LOW⚡docs/1.x/extensions/footnotes.md38 Lorem ipsum dolor sit amet, consectetur adipiscing elit.CODE
LOW⚡docs/1.x/extensions/footnotes.md38 Lorem ipsum dolor sit amet, consectetur adipiscing elit.CODE
LOWdocs/1.x/extensions/table-of-contents.md52 'placeholder' => null,CODE
LOWdocs/1.x/extensions/table-of-contents.md85- `'placeholder'` - Location is manually defined by a user-provided placeholder somewhere in the document (see the `placCODE
LOWdocs/1.x/extensions/table-of-contents.md91When combined with `'position' => 'placeholder'`, this setting tells the extension which placeholder content should be rCODE
LOWdocs/2.x/security.md133This only applies if you're using the [Table of Contents extension](/2.x/extensions/table-of-contents/) with `'position'CODE
LOW⚡docs/2.x/extensions/footnotes.md37Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi[^note1] leo risus, porta ac consectetur ac.CODE
LOW⚡docs/2.x/extensions/footnotes.md37Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi[^note1] leo risus, porta ac consectetur ac.CODE
LOW⚡docs/2.x/extensions/footnotes.md47 Lorem ipsum dolor sit amet, consectetur adipiscing elit.CODE
LOW⚡docs/2.x/extensions/footnotes.md47 Lorem ipsum dolor sit amet, consectetur adipiscing elit.CODE
LOW⚡docs/2.x/extensions/footnotes.md69Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi^[Elit Malesuada Ridiculus] leo risus, porta ac consectetuCODE
LOW⚡docs/2.x/extensions/footnotes.md69Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi^[Elit Malesuada Ridiculus] leo risus, porta ac consectetuCODE
LOW⚡docs/2.x/extensions/footnotes.md76 Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi<sup id="fnref:elit-malesuada-ridic"><a class="footnotCODE
LOW⚡docs/2.x/extensions/footnotes.md76 Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi<sup id="fnref:elit-malesuada-ridic"><a class="footnotCODE
LOWdocs/2.x/extensions/table-of-contents.md55 'placeholder' => null,CODE
LOW⚡docs/2.x/extensions/table-of-contents.md97- `'placeholder'` - Location is manually defined by a user-provided placeholder somewhere in the document (see the `placCODE
LOW⚡docs/2.x/extensions/table-of-contents.md101In `'placeholder'` mode the document contains a single `TableOfContents` node, which is the one the listener above will CODE
LOW⚡docs/2.x/extensions/table-of-contents.md105When combined with `'position' => 'placeholder'`, this setting tells the extension which placeholder content should be rCODE
LOW⚡docs/2.x/extensions/table-of-contents.md109When combined with `'position' => 'placeholder'`, this option limits how many table of contents entries a single documenCODE
LOW…c/Extension/TableOfContents/TableOfContentsBuilder.php34 public const POSITION_PLACEHOLDER = 'placeholder';CODE
LOW…Extension/TableOfContents/TableOfContentsExtension.php39 'placeholder' => Expect::anyOf(Expect::string(), Expect::null())->default(null),CODE
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOW…ctional/Extension/TableOfContents/xml/style-ordered.md1---COMMENT
LOW…nctional/Extension/TableOfContents/xml/style-bullet.md1---COMMENT
LOW…nctional/Extension/TableOfContents/md/style-ordered.md1---COMMENT
LOW…unctional/Extension/TableOfContents/md/style-bullet.md1---COMMENT
TODO Padding2 hits · 3 pts
SeverityFileLineSnippetContext
LOWdocs/2.x/customization/block-parsing.md144 // TODO: implement your continuation parsing methods hereCOMMENT
LOWdocs/2.x/customization/block-parsing.md150 // TODO: implement the tryStart() method hereCOMMENT
Slop Phrases2 hits · 2 pts
SeverityFileLineSnippetContext
LOW.github/ISSUE_TEMPLATE/2_Bug_report.yaml23 Markdown and/or config needed to reproduce the problem. Don't forget to mention any extensions you might hCODE
LOWsrc/Extension/FrontMatter/FrontMatterParser.php59 // Don't forget to add 1 because we stripped one out when trimming the trailing delimsCOMMENT