Home / vastsa / FileCodeBox
AI Slop Code RIsk Monitor

vastsa/FileCodeBox

文件快递柜-匿名口令分享文本，文件，像拿快递一样取文件（FileCodeBox - File Express Cabinet - Anonymous Passcode Sharing Text, Files, Like Taking Express Delivery for Files）

16.5 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for vastsa/FileCodeBox, a Python project with 8,608 GitHub stars. SynthScan examined 24,689 lines of code across 136 source files, recording 336 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 16.5 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

16.5
Adjusted Signal
16.5
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
8.6K
Stars
Python
Language
24.7K
Lines of Code
136
Files
336
Pattern Hits
2026-10-12
Scan Date
0.05
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 44.0/100 · MEDIUM

Can maintainers explain intent, assumptions, and trade-offs? 250 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.9/100 · LOW

Are imports declared and package/API names verified? 15 finding(s).

Agent Over-Engineering Ratio 52.9/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 299 finding(s).

PR Review Velocity Impact 54.0/100 · HIGH

Which changes need focused human review? 336 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 7MEDIUM 6LOW 323

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 336 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers225 hits · 262 pts
SeverityFileLineSnippetContext
LOWmain.py103async def refresh_settings_middleware(request, call_next):CODE
LOWcore/security.py129def validate_outbound_endpoint(value: Any) -> str:CODE
LOWcore/security.py149def validate_outbound_hostname(value: Any) -> str:CODE
LOWcore/logger.py16def is_production_environment() -> bool:CODE
LOWcore/storage/_base.py156 async def generate_presigned_upload_url(self, save_path: str, expires_in: int = 900) -> Optional[str]:CODE
LOWcore/storage/onedrive.py127 def _convert_link_to_download_link(self, link):CODE
LOWcore/storage/s3.py296 async def generate_presigned_upload_url(self, save_path: str, expires_in: int = 900) -> Optional[str]:CODE
LOWtests/test_admin_security.py25 def test_initial_security_config_requires_setup_and_generates_jwt_secret(self):CODE
LOWtests/test_admin_security.py34 def test_legacy_default_password_requires_setup(self):CODE
LOWtests/test_admin_security.py45 def test_custom_plaintext_password_is_hashed_and_initialized(self):CODE
LOWtests/test_admin_security.py58 def test_parse_setup_options_converts_common_fields(self):CODE
LOW⚡tests/test_admin_security.py93 def test_parse_setup_options_allows_turning_guest_upload_off(self):CODE
LOW⚡tests/test_admin_security.py103 def test_parse_setup_options_requires_expire_style(self):CODE
LOW⚡tests/test_admin_security.py109 def test_admin_jwt_signature_uses_independent_secret(self):CODE
LOWtests/test_admin_security.py123 def test_configured_session_lifetime_is_returned_by_login(self):CODE
LOWtests/test_admin_security.py184 def test_storage_limit_rejects_negative_values(self):CODE
LOWtests/test_admin_security.py190 def test_admin_session_lifetime_rejects_out_of_range_values(self):CODE
LOWtests/test_admin_security.py203 def test_admin_password_update_rotates_jwt_secret(self):CODE
LOWtests/test_admin_security.py228 def test_initialize_system_sets_admin_password_and_jwt_secret(self):CODE
LOWtests/test_mcp_upload.py8async def test_mcp_initialize_and_list_tools(initialized_client):CODE
LOWtests/test_mcp_upload.py27async def test_mcp_rejects_cross_origin_requests(initialized_client):CODE
LOWtests/test_mcp_upload.py37async def test_mcp_token_can_be_required(initialized_client):CODE
LOWtests/test_negative_edge_paths.py36 async def test_second_download_refused_after_limit(self, initialized_client):CODE
LOWtests/test_negative_edge_paths.py140 async def test_browser_accept_gets_theme_page(self, initialized_client):CODE
LOWtests/test_negative_edge_paths.py255 async def test_existing_object_streams_payload(self, monkeypatch):CODE
LOW⚡tests/test_version.py11 def test_version_file_is_the_runtime_version_source(self):CODE
LOW⚡tests/test_version.py19 def test_release_manifest_matches_version_file(self):CODE
LOW⚡tests/test_version.py25 def test_build_can_override_version_with_environment(self):CODE
LOW⚡tests/test_version.py31 def test_rejects_non_canonical_versions(self):CODE
LOW⚡tests/test_webdav_storage.py136 async def test_save_roundtrip_and_exists(self, dav_storage):CODE
LOW⚡tests/test_webdav_storage.py144 async def test_delete_file_and_empty_parent_dirs(self, dav_storage):CODE
LOW⚡tests/test_webdav_storage.py152 async def test_delete_missing_file_is_accepted(self, dav_storage):CODE
LOW⚡tests/test_webdav_storage.py156 async def test_get_file_response_roundtrip(self, dav_storage):CODE
LOWtests/test_webdav_storage.py196 async def test_merge_success_and_cleanup(self, dav_storage):CODE
LOWtests/test_webdav_storage.py217 async def test_merge_missing_chunk_raises(self, dav_storage):CODE
LOWtests/test_webdav_storage.py227 async def test_merge_hash_mismatch_raises(self, dav_storage):CODE
LOWtests/test_integration_journey.py81 async def test_upload_select_download_roundtrip(self, client):CODE
LOWtests/test_integration_journey.py106 async def test_text_share_roundtrip(self, client):CODE
LOWtests/test_integration_journey.py111 async def test_count_limited_code_fails_after_exhaustion(self, client):CODE
LOWtests/test_integration_journey.py143 async def test_full_chunk_upload_merge_and_download(self, client):CODE
LOW⚡tests/test_integration_journey.py162 async def test_chunk_oversize_rejected(self, client):CODE
LOW⚡tests/test_integration_journey.py168 async def test_invalid_chunk_index_rejected(self, client):CODE
LOW⚡tests/test_integration_journey.py174 async def test_cancel_upload_cleans_session(self, client):CODE
LOWtests/test_integration_journey.py191 async def test_guest_upload_allowed_when_open_upload_on(self, client):CODE
LOWtests/test_integration_journey.py196 async def test_upload_requires_login_when_guest_upload_off(self, client):CODE
LOWtests/test_integration_journey.py212 async def test_admin_endpoints_reject_missing_token(self, client):CODE
LOW⚡tests/test_s3_storage_moto.py73 async def test_save_and_exists_roundtrip(self, s3_storage):CODE
LOW⚡tests/test_s3_storage_moto.py80 async def test_delete_file_removes_object(self, s3_storage):CODE
LOW⚡tests/test_s3_storage_moto.py85 async def test_presigned_upload_url_targets_bucket_and_key(self, s3_storage):CODE
LOW⚡tests/test_s3_storage_moto.py91 async def test_get_file_url_proxy_uses_local_dispatch(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py103 async def test_get_file_url_direct_returns_presigned(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py119 async def test_existing_object_returns_download_with_length(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py125 async def test_stream_factory_roundtrip_via_presigned_url(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py136 async def test_merge_success_roundtrip_then_cleanup(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py159 async def test_merge_missing_chunk_aborts_and_raises(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py170 async def test_merge_hash_mismatch_aborts_and_raises(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py179 async def test_clean_chunks_scoped_to_upload_only(self, s3_storage):CODE
LOWtests/test_s3_storage_moto.py195 async def test_save_chunk_stores_declared_hash_metadata(self, s3_storage):CODE
LOW⚡tests/test_logging.py25 def test_production_defaults_to_warning_and_disables_access_logs(self):CODE
LOW⚡tests/test_logging.py32 def test_development_defaults_to_info_and_keeps_access_logs(self):CODE
165 more matches not shown…
Excessive Try-Catch Wrapping63 hits · 70 pts
SeverityFileLineSnippetContext
LOWcore/database.py100 except Exception as e:STRING
LOWcore/database.py140 except Exception as e:CODE
LOWcore/database.py144 except Exception as e:CODE
MEDIUMcore/database.py80def init_db():CODE
LOWcore/storage/webdav.py191 except Exception:CODE
LOWcore/storage/webdav.py340 except Exception as e:CODE
LOWcore/storage/local.py108 except Exception as e:CODE
LOWcore/storage/local.py144 except Exception as e:CODE
LOWcore/storage/local.py162 except Exception as e:CODE
LOWcore/storage/local.py169 except Exception as e:CODE
LOWcore/storage/onedrive.py62 except Exception as e:CODE
LOWcore/storage/onedrive.py172 except Exception:CODE
LOWcore/storage/onedrive.py203 except Exception:CODE
LOWcore/storage/onedrive.py285 except Exception as e:CODE
LOWcore/storage/onedrive.py317 except Exception as e:CODE
MEDIUMcore/storage/onedrive.py27def __init__(self):CODE
LOWcore/storage/s3.py108 except Exception:CODE
LOWcore/storage/s3.py152 except Exception:CODE
LOWcore/storage/s3.py244 except Exception as e:CODE
LOWcore/storage/s3.py263 except Exception as e:CODE
LOWcore/storage/s3.py293 except Exception as e:CODE
LOWcore/storage/s3.py325 except Exception as e:CODE
LOWcore/storage/s3.py339 except Exception as e:CODE
MEDIUMcore/storage/s3.py124def stream_generator():CODE
LOWcore/storage/opendal.py63 except Exception:CODE
LOWcore/storage/opendal.py95 except Exception as e:CODE
LOWcore/storage/opendal.py121 except Exception as e:CODE
LOWcore/storage/opendal.py145 except Exception as e:CODE
LOWcore/storage/opendal.py157 except Exception:CODE
MEDIUMcore/storage/opendal.py23def __init__(self):CODE
LOWapps/admin/services.py123 except Exception as exc:CODE
LOWapps/admin/services.py166 except Exception as exc:CODE
LOWapps/admin/services.py430 except Exception as exc:CODE
LOWapps/admin/services.py821 except Exception:CODE
LOWapps/admin/views.py79 except Exception:CODE
LOWapps/base/auth.py99 except Exception:CODE
LOWapps/base/auth.py108 except Exception as e:CODE
MEDIUMapps/base/auth.py31def get_admin_session_expire_seconds() -> int:CODE
LOWapps/base/services.py66 except Exception:CODE
LOWapps/base/services.py193 except Exception:CODE
LOWapps/base/services.py231 except Exception:CODE
LOWapps/base/services.py281 except Exception as e:CODE
LOWapps/base/services.py285 except Exception:CODE
LOWapps/base/services.py315 except Exception as e:CODE
LOWapps/base/services.py326 except Exception:CODE
LOWapps/base/services.py379 except Exception:CODE
LOW⚡apps/base/tasks.py47 except Exception as e:CODE
LOW⚡apps/base/tasks.py51 except Exception as e:CODE
LOW⚡apps/base/tasks.py53 except Exception as e:CODE
LOWapps/base/tasks.py79 except Exception as e:CODE
LOW⚡apps/base/tasks.py90 except Exception as e:CODE
LOW⚡apps/base/tasks.py95 except Exception as e:CODE
LOWapps/base/tasks.py120 except Exception as e:CODE
LOWapps/base/tasks.py129 except Exception as e:CODE
LOWapps/base/quota.py36 except Exception:CODE
LOWapps/base/quota.py115 except Exception:STRING
MEDIUMapps/base/quota.py60def get_storage_limit() -> int:CODE
LOWapps/base/views.py287 except Exception:CODE
LOWapps/base/views.py367 except Exception:CODE
LOWapps/base/views.py448 except Exception as e:CODE
3 more matches not shown…
Empty Error Handlers7 hits · 35 pts
SeverityFileLineSnippetContext
HIGHcore/storage/webdav.py191except Exception:CODE
HIGHcore/storage/onedrive.py172except Exception:CODE
HIGHcore/storage/s3.py108except Exception:CODE
HIGHcore/storage/opendal.py63except Exception:CODE
HIGHtests/test_local_share.py168except SleepSentinel:CODE
HIGHtests/test_cleanup_tasks.py46except SleepSentinel:CODE
HIGHapps/base/local_share.py104except OSError:CODE
Deep Nesting18 hits · 18 pts
SeverityFileLineSnippetContext
LOWcore/database.py105CODE
LOWcore/storage/webdav.py161CODE
LOWcore/storage/webdav.py309CODE
LOWcore/storage/onedrive.py146CODE
LOWcore/storage/onedrive.py216CODE
LOWcore/storage/onedrive.py248CODE
LOWcore/storage/s3.py83CODE
LOWcore/storage/opendal.py51CODE
LOWtests/test_version.py31CODE
LOWtests/test_local_share.py138CODE
LOWtests/test_merge_chunks.py31CODE
LOWtests/test_attachment_guard.py32CODE
LOWapps/admin/services.py1106CODE
LOWapps/admin/config_service.py64CODE
LOWapps/base/tasks.py26CODE
LOWapps/base/tasks.py59CODE
LOWapps/base/tasks.py101CODE
LOWapps/base/mcp.py178CODE
Unused Imports15 hits · 14 pts
SeverityFileLineSnippetContext
LOWcore/storage/__init__.py6CODE
LOWcore/storage/__init__.py6CODE
LOWcore/storage/__init__.py6CODE
LOWcore/storage/__init__.py6CODE
LOWcore/storage/__init__.py6CODE
LOWtests/test_admin_write_paths.py264CODE
LOWapps/admin/services.py1464CODE
LOWapps/admin/services.py1465CODE
LOWapps/admin/dependencies.py10CODE
LOWapps/admin/dependencies.py10CODE
LOWapps/admin/dependencies.py10CODE
LOWapps/admin/dependencies.py10CODE
LOWapps/admin/dependencies.py10CODE
LOWapps/base/file_validation.py3CODE
LOWapps/base/local_share.py12CODE
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOWcore/__init__.py1# @Time : 2023/8/11 20:06COMMENT
LOWapps/__init__.py1# @Time : 2023/8/13 20:43COMMENT
LOWapps/admin/__init__.py1# @Time : 2023/8/14 14:38COMMENT
LOWapps/base/__init__.py1# @Time : 2023/8/13 20:43COMMENT
AI Structural Patterns3 hits · 3 pts
SeverityFileLineSnippetContext
LOWcore/storage/onedrive.py75CODE
LOWtests/test_integration_journey.py141CODE
LOWapps/admin/views.py382CODE
Modern Structural Boilerplate1 hit · 1 pts
SeverityFileLineSnippetContext
LOWapps/admin/dependencies.py24__all__ = [CODE