AI Slop Code Risk Monitor

winsiderss/systeminformer

SlopCodeMonitor badge for winsiderss/systeminformer Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

2.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for winsiderss/systeminformer, a C project with 16,385 GitHub stars. SynthScan examined 1,523,663 lines of code across 1761 source files, recording 4001 pattern matches distributed across 7 syntactic categories. The legacy adjusted pattern signal is 2.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

2.3
Adjusted Signal
2.3
Raw Pattern Score
100%
Time Factor
2026-10-30
Last Push
16.4K
Stars
C
Language
1.5M
Lines of Code
1.8K
Files
4.0K
Pattern Hits
2026-10-31
Scan Date
0.00
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 10.6/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 4000 finding(s).

Hallucinated Dependency & Supply Chain Risk 0.0/100 · LOW

Are imports declared and package/API names verified? 1 finding(s).

Agent Over-Engineering Ratio 0.0/100 · LOW

Are wrappers, guards, and repeated structures necessary? 0 finding(s).

PR Review Velocity Impact 12.4/100 · LOW

Which changes need focused human review? 4001 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 1HIGH 1MEDIUM 8LOW 3991

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 4001 distinct pattern matches across 7 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block3975 hits · 3370 pts
SeverityFileLineSnippetContext
LOWtools/CustomBuildTool/BuildHttpClient.cs181 /// </summary>COMMENT
LOWtools/CustomBuildTool/BuildVirusTotal.cs21 /// <summary>COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs341 /// This command is kept for comparison against the legacy format.COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs361 // {COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs381 //COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs401 // Directory.CreateDirectory(testFolder);COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs421 // if (!PInvoke.ApplyPatchToFileW(patchFile, testSourceFile, testTargetFile, APPLY_OPTION_NONE))COMMENT
LOWtools/CustomBuildTool/BuildDelta.cs441 // BuildDelta.PrintFileInfo("Applied (copy)", testTargetFile, appliedBuffer);COMMENT
LOWtools/CustomBuildTool/Win32.cs321 }COMMENT
LOWtools/CustomBuildTool/Win32.cs461 Program.PrintColorMessage($"[SDK] {SourceFile} copied to {DestinationFile}", ConsoleColor.Green, true, FCOMMENT
LOWtools/CustomBuildTool/BuildSourceForge.cs41 /// <summary>COMMENT
LOWtools/CustomBuildTool/BuildConfig.cs21 public static class BuildConfigCOMMENT
LOWtools/CustomBuildTool/BuildConfig.cs41COMMENT
LOWtools/CustomBuildTool/BuildConfig.cs61 /// Gets an immutable array of PHNT (Platform Header Native Types) header file names.COMMENT
LOWtools/CustomBuildTool/BuildConfig.cs81 // "ntmmapi.h",COMMENT
LOWtools/CustomBuildTool/BuildConfig.cs101 // "ntwow64.h",COMMENT
LOWtools/CustomBuildTool/Build.cs341 /// </summary>COMMENT
LOWtools/CustomBuildTool/Build.cs361 // For example, if the day of the year is 5, it will be converted to "005".COMMENT
LOWtools/CustomBuildTool/Build.cs381 var minuteOffset = TimeStart.Minute.ToString("D2");COMMENT
LOWtools/CustomBuildTool/Build.cs641COMMENT
LOWtools/CustomBuildTool/Build.cs2101 });COMMENT
LOWtools/CustomBuildTool/Build.cs2381 //COMMENT
LOWtools/CustomBuildTool/Build.cs2681 {COMMENT
LOWtools/CustomBuildTool/Build.cs2781 *COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs21COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs221 /// <summary>COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs281 /// <summary>COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs341 /// <summary>COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs361COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs401COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs481 /// Represents a project in Azure DevOps.COMMENT
LOWtools/CustomBuildTool/BuildDevOps.cs581COMMENT
LOWtools/CustomBuildTool/HeaderGen.cs21 /// The copyright and license notice to prepend to the generated header.COMMENT
LOWtools/CustomBuildTool/HeaderGen.cs321 }COMMENT
LOWtools/CustomBuildTool/BuildStoreSubmission.cs21 /// Client Id of your Microsoft Entra ID Directory app.COMMENT
LOWtools/CustomBuildTool/BuildStoreSubmission.cs41 public string TokenEndpoint { get; set; }COMMENT
LOWtools/CustomBuildTool/BuildStoreSubmission.cs321 /// <summary>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs21 /// The Azure Key Vault REST API version used for all vault requests.COMMENT
LOWtools/CustomBuildTool/AzureClient.cs101 /// <param name="CancellationToken">Cancellation token to cancel the operation.</param>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs221 return true;COMMENT
LOWtools/CustomBuildTool/AzureClient.cs421 /// </summary>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs481 /// <param name="HttpClient">The HTTP client for making requests.</param>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs561 /// <param name="HttpClient">The HTTP client for making requests.</param>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs681 /// <param name="Certificate">The X.509 certificate with a private key for signing.</param>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs761 /// <remarks>COMMENT
LOWtools/CustomBuildTool/AzureClient.cs821 return certificate.CopyWithPrivateKey(ecdsa);COMMENT
LOWtools/CustomBuildTool/AzureClient.cs901 /// Gets or sets the certificate identifier URL.COMMENT
LOWtools/CustomBuildTool/AzureClient.cs1061 /// Gets or sets the X.509 certificate thumbprint (Base64URL-encoded).COMMENT
LOWtools/CustomBuildTool/DynData.cs101 /// <summary>COMMENT
LOWtools/CustomBuildTool/DynData.cs261 public UInt16 Class;COMMENT
LOWtools/CustomBuildTool/BuildAzure.cs21 /// externally.</remarks>COMMENT
LOWtools/CustomBuildTool/BuildAzure.cs141 Program.PrintColorMessage("KeyVaultDigestSignFiles Failed.", ConsoleColor.Red);COMMENT
LOWtools/CustomBuildTool/BuildAzure.cs261 }COMMENT
LOWtools/CustomBuildTool/BuildAzure.cs281 // new KeyValuePair<string, string>("scope", "https://vault.azure.net/.default"),COMMENT
LOWtools/CustomBuildTool/Zip.cs161 }COMMENT
LOWtools/CustomBuildTool/Zip.cs321 // var entry = archive.CreateEntryFromFile(filesToAdd[i], entryNames[i], System.IO.Compression.CompreCOMMENT
LOWtools/CustomBuildTool/Zip.cs341 // }COMMENT
LOWtools/CustomBuildTool/Zip.cs381 WriteEntry(writer, fileStream, name, file, CompressionType.None, progressReporter, Flags);COMMENT
LOWtools/CustomBuildTool/Zip.cs401 // shouldSkip = true;COMMENT
LOWtools/CustomBuildTool/BuildGithub.cs21 /// </summary>COMMENT
3915 more matches not shown…
AI Slop Vocabulary8 hits · 22 pts
SeverityFileLineSnippetContext
MEDIUMtools/tests/phlib-test/include/fmt/format.h3383 // Compilers are not aware of how to leverage the maximum value ofCOMMENT
MEDIUMtools/peview/pvtheme.c457 // surface stays seamless without leaving stale text behind on an update. The DCCOMMENT
MEDIUMtools/thirdparty/SymCrypt/lib/sha256.c1376// For the SHA-NI implementation we will utilize 128-bit XMM registers. EachCOMMENT
MEDIUMKSystemInformer/informer_fileop.c2531// of the file. Essentially, this is asserting that FLT_PARAMETERS has notCOMMENT
MEDIUMphlib/bcd.cpp586 // is NOT the default {fwbootmgr} entry. So make the reboot seamless/effortless byCOMMENT
MEDIUMphnt/include/ntbcd.h2252 /// Indicates whether the system should utilize the first 4GB of physical memory.COMMENT
MEDIUMphnt/include/ntpfapi.h810 PfRpControlRobustAllStart = 2, // 2: Start the robust-all mode.CODE
MEDIUMphnt/include/ntpfapi.h811 PfRpControlRobustAllStop = 3, // 3: Stop the robust-all mode.CODE
Verbosity Indicators8 hits · 15 pts
SeverityFileLineSnippetContext
LOWtools/tests/phlib-test/include/fmt/format-inl.h1275 // Step 1: integer promotion & Schubfach multiplier calculation.COMMENT
LOWtools/tests/phlib-test/include/fmt/format-inl.h1330 // Step 2: Try larger divisor; remove trailing zeros if necessary.COMMENT
LOWtools/tests/phlib-test/include/fmt/format-inl.h1362 // Step 3: Find the significand with the smaller divisor.COMMENT
LOWtools/thirdparty/jsonc/arraylist.c226 // Because put_idx can skip entries, we need to check ifCOMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1767 // Step 3: Acceptable pairs of L,N => skippedCOMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1769 // Step 6: nBitsOfSeed < nBitsOfQ => skippedCOMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1857 // Step 2: Verify that 2<= G <= p-1COMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1866 // Step 3: Verify that G^Q == 1COMMENT
Structural Annotation Overuse7 hits · 14 pts
SeverityFileLineSnippetContext
LOWtools/tests/phlib-test/include/fmt/format-inl.h1275 // Step 1: integer promotion & Schubfach multiplier calculation.COMMENT
LOWtools/tests/phlib-test/include/fmt/format-inl.h1330 // Step 2: Try larger divisor; remove trailing zeros if necessary.COMMENT
LOWtools/tests/phlib-test/include/fmt/format-inl.h1362 // Step 3: Find the significand with the smaller divisor.COMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1767 // Step 3: Acceptable pairs of L,N => skippedCOMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1769 // Step 6: nBitsOfSeed < nBitsOfQ => skippedCOMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1857 // Step 2: Verify that 2<= G <= p-1COMMENT
LOW⚡tools/thirdparty/SymCrypt/lib/dlgroup.c1866 // Step 3: Verify that G^Q == 1COMMENT
Hallucination Indicators1 hit · 10 pts
SeverityFileLineSnippetContext
CRITICALtools/CustomBuildTool/BuildCat.cs73 var subjectInfo = new Windows.Win32.Security.Cryptography.Sip.SIP_SUBJECTINFO();CODE
AI Response Leakage1 hit · 8 pts
SeverityFileLineSnippetContext
HIGHphlib/avltree.c507 // In this implementation, the balance factor is the right height minus left height.COMMENT
Slop Phrases1 hit · 2 pts
SeverityFileLineSnippetContext
LOWtools/thirdparty/jsonc/json_object.h436 * ownership through json_object_get (& don't forget to do a json_object_putCOMMENT