AI Slop Code Risk Monitor

vladelaina/Catime

SlopCodeMonitor badge for vladelaina/Catime Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

💌A tiny (995KB) but mighty timer in **pure C** ! — almost no memory usage!❤️‍🔥 Supports clock, countdown, stopwatch, Pomodoro, and fully customizable tray animations (GIFs, CPU/Mem%) 💘 Don't be shy, join here🧸: https://discord.com/invite/W3tW2gtp6g

1.9 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for vladelaina/Catime, a C project with 4,950 GitHub stars. SynthScan examined 123,473 lines of code across 865 source files, recording 236 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 1.9 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.9
Adjusted Signal
1.9
Raw Pattern Score
100%
Time Factor
2026-10-16
Last Push
5.0K
Stars
C
Language
123.5K
Lines of Code
865
Files
236
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 8.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 233 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.1/100 · LOW

Are imports declared and package/API names verified? 3 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 9.1/100 · LOW

Which changes need focused human review? 236 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 0MEDIUM 0LOW 236

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 236 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block218 hits · 206 pts
SeverityFileLineSnippetContext
LOWbuild.sh1#!/bin/bashCOMMENT
LOWinclude/config.h1/**COMMENT
LOWinclude/config.h21COMMENT
LOWinclude/update/update_internal.h1#ifndef UPDATE_INTERNAL_HCOMMENT
LOWinclude/config/config_defaults.h21#define DEFAULT_QUICK_COUNTDOWN_1 1500COMMENT
LOWinclude/config/config_defaults.h41#define DEFAULT_NOTIFICATION_CORNER_RADIUS 12COMMENT
LOWinclude/config/config_constants.h21#define ANIMATIONS_PATH_PREFIX \COMMENT
LOWinclude/config/config_constants.h41#define DEFAULT_MOVE_STEP_SMALL 10COMMENT
LOWinclude/config/config_constants.h61#define INI_SECTION_RECENTFILES "RecentFiles"COMMENT
LOWinclude/window_procedure/window_utils.h41COMMENT
LOWinclude/window_procedure/window_procedure.h21COMMENT
LOWinclude/window_procedure/window_procedure.h41#ifndef WM_APP_DISPLAY_CHANGEDCOMMENT
LOWtests/hotkey_config_tests.c1#include "config/config_settings_api.h"COMMENT
LOWtests/menu_preview_lifecycle_tests.c1#include "menu_preview.h"COMMENT
LOWtests/tray_event_protocol_tests.c1#include "tray/tray_event_protocol.h"COMMENT
LOWlibs/miniaudio/miniaudio.c1#define MINIAUDIO_IMPLEMENTATIONCOMMENT
LOWlibs/miniz/miniz_export.h1COMMENT
LOWlibs/miniz/miniz_export.h21# endifCOMMENT
LOWlibs/miniz/miniz_common.h21COMMENT
LOWlibs/miniz/miniz_common.h41} mz_dummy_time_t;COMMENT
LOWlibs/miniz/miniz_common.h61#define MZ_CLEAR_OBJ(obj) memset(&(obj), 0, sizeof(obj))COMMENT
LOWlibs/stb/stb_truetype.h1// stb_truetype.h - v1.26 - public domainCOMMENT
LOWlibs/stb/stb_truetype.h21// non-MS cmapsCOMMENT
LOWlibs/stb/stb_truetype.h41// Daniel Ribeiro MacielCOMMENT
LOWlibs/stb/stb_truetype.h61// 1.26 (2021-08-28) fix broken rasterizerCOMMENT
LOWlibs/stb/stb_truetype.h81// variant PackFontRanges to pack and render in separate phases;COMMENT
LOWlibs/stb/stb_truetype.h101// #define STBTT_STATICCOMMENT
LOWlibs/stb/stb_truetype.h121// stbtt_GetCodepointBitmap() -- allocates and returns a bitmapCOMMENT
LOWlibs/stb/stb_truetype.h141//COMMENT
LOWlibs/stb/stb_truetype.h161// BaselineCOMMENT
LOWlibs/stb/stb_truetype.h181// measurement for describing font size, defined as 72 points per inch.COMMENT
LOWlibs/stb/stb_truetype.h201// Baseline:COMMENT
LOWlibs/stb/stb_truetype.h221// <current_point+SF*x0, baseline+SF*y0> to <current_point+SF*x1,baseline+SF*y1).COMMENT
LOWlibs/stb/stb_truetype.h241// - Convert Unicode codepoints to glyph indexes and operate on the glyphs;COMMENT
LOWlibs/stb/stb_truetype.h261// PERFORMANCE MEASUREMENTS FOR 1.06:COMMENT
LOWlibs/stb/stb_truetype.h361// :@@@MM@MCOMMENT
LOWlibs/stb/stb_truetype.h441 // e.g. #define your own STBTT_ifloor/STBTT_iceil() to avoid math.hCOMMENT
LOWlibs/stb/stb_truetype.h461 #define STBTT_cos(x) cos(x)COMMENT
LOWlibs/stb/stb_truetype.h481COMMENT
LOWlibs/stb/stb_truetype.h561// Characters will extend both above and below the current position;COMMENT
LOWlibs/stb/stb_truetype.h581 float xoff2,yoff2;COMMENT
LOWlibs/stb/stb_truetype.h601STBTT_DEF void stbtt_PackEnd (stbtt_pack_context *spc);COMMENT
LOWlibs/stb/stb_truetype.h641// This function sets the amount of oversampling for all following calls toCOMMENT
LOWlibs/stb/stb_truetype.h661 float *xpos, float *ypos, // pointers to current position in screen pixel spaceCOMMENT
LOWlibs/stb/stb_truetype.h701// collection (.ttc) files may contain multiple fonts, while TrueType fontCOMMENT
LOWlibs/stb/stb_truetype.h741COMMENT
LOWlibs/stb/stb_truetype.h761// computes a scale factor to produce a font whose "height" is 'pixels' tall.COMMENT
LOWlibs/stb/stb_truetype.h841 } stbtt_vertex;COMMENT
LOWlibs/stb/stb_truetype.h861COMMENT
LOWlibs/stb/stb_truetype.h881// which is stored left-to-right, top-to-bottom.COMMENT
LOWlibs/stb/stb_truetype.h941 void *userdata); // context for to STBTT_MALLOCCOMMENT
LOWlibs/stb/stb_truetype.h961// pixel_dist_scale -- what value the SDF should increase by when moving one SDF "pixel" away from the edge (onCOMMENT
LOWlibs/stb/stb_truetype.h981// which is beyond the scope of this example.) Additionally, you can computeCOMMENT
LOWlibs/stb/stb_truetype.h1001//////////////////////////////////////////////////////////////////////////////COMMENT
LOWlibs/stb/stb_truetype.h1021COMMENT
LOWlibs/stb/stb_truetype.h1101///////////////////////////////////////////////////////////////////////////////COMMENT
LOWlibs/stb/stb_truetype.h1121#define STBTT_RASTERIZER_VERSION 2COMMENT
LOWlibs/stb/stb_truetype.h3201 // | | /- xx*xxxx........|............|............|COMMENT
LOWlibs/stb/stb_truetype.h3221 // area of the triangle (x_top,sy0), (x1+1,sy0), (x1+1,y_crossing)COMMENT
LOWlibs/stb/stb_truetype.h3261 // of this library, we use a different, very slow bruteCOMMENT
158 more matches not shown…
Verbosity Indicators4 hits · 8 pts
SeverityFileLineSnippetContext
LOWbuild.sh214# Step 1: Configure with CMakeCOMMENT
LOW⚡build.sh249# Step 2: Count source files for progress trackingCOMMENT
LOW⚡build.sh256# Step 3: Build with progress monitoringCOMMENT
LOWbuild.sh326# Step 4: Finalize (only if build succeeded)COMMENT
Structural Annotation Overuse4 hits · 8 pts
SeverityFileLineSnippetContext
LOWbuild.sh214# Step 1: Configure with CMakeCOMMENT
LOW⚡build.sh249# Step 2: Count source files for progress trackingCOMMENT
LOW⚡build.sh256# Step 3: Build with progress monitoringCOMMENT
LOWbuild.sh326# Step 4: Finalize (only if build succeeded)COMMENT
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippetContext
LOWbuild.sh281 # Check if no progress for too longCOMMENT
LOWbuild.sh284 # Check if build process is actually dead or stuckCOMMENT
LOWbuild.sh402# Check if executable was createdCOMMENT
Unused Imports3 hits · 3 pts
SeverityFileLineSnippetContext
LOW.github/scripts/ci/scan_virustotal.py10CODE
LOW.github/scripts/ci/check_publish_guards.py4CODE
LOW.github/scripts/ci/check_source_security.py4CODE
Deep Nesting3 hits · 3 pts
SeverityFileLineSnippetContext
LOW.github/scripts/ci/scan_virustotal.py47CODE
LOW.github/scripts/ci/scan_virustotal.py118CODE
LOW.github/scripts/ci/check_source_security.py121CODE
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWbuild.sh6# Usage:COMMENT