AI Slop Code Risk Monitor

yamadashy/repomix

SlopCodeMonitor badge for yamadashy/repomix Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for when you need to feed your codebase to Large Language Models (LLMs) or other AI tools like Claude, ChatGPT, DeepSeek, Perplexity, Gemini, Gemma, Llama, Grok, and more.

1.1 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for yamadashy/repomix, a TypeScript project with 29,098 GitHub stars. SynthScan examined 176,417 lines of code across 1107 source files, recording 114 pattern matches distributed across 11 syntactic categories. The legacy adjusted pattern signal is 1.1 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

1.1
Adjusted Signal
1.1
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
29.1K
Stars
TypeScript
Language
176.4K
Lines of Code
1.1K
Files
114
Pattern Hits
2026-10-31
Scan Date
0.02
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 3.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 91 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.1/100 · LOW

Are imports declared and package/API names verified? 22 finding(s).

Agent Over-Engineering Ratio 0.6/100 · LOW

Are wrappers, guards, and repeated structures necessary? 16 finding(s).

PR Review Velocity Impact 6.1/100 · LOW

Which changes need focused human review? 114 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 19MEDIUM 6LOW 89

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 114 distinct pattern matches across 11 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Cross-Language Confusion (JS/TS)18 hits · 70 pts
SeverityFileLineSnippetContext
HIGHtests/core/treeSitter/parseFile.dart.test.ts18 print('Hello, $name!');CODE
HIGHtests/core/treeSitter/parseFile.dart.test.ts147 print('walking');CODE
HIGHtests/core/treeSitter/parseFile.dart.test.ts162 print('nickname is $value');CODE
HIGHtests/core/treeSitter/parseFile.swift.test.ts42 print("Circle deinitialized")CODE
HIGHtests/core/treeSitter/parseFile.swift.test.ts92 print("Total area: \\(totalArea)")CODE
HIGHtests/core/file/fileManipulate.test.ts311 return TrueCODE
HIGHtests/core/file/fileManipulate.test.ts323 return TrueCODE
HIGHtests/core/file/fileManipulate.test.ts360 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts369 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts381 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts389 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts423 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts435 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts598 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts607 return TrueSTRING
HIGHtests/core/file/fileManipulate.test.ts750 print('Hello');CODE
HIGHtests/core/file/fileManipulate.test.ts758 print('Hello');CODE
HIGHtests/core/file/fileRead.test.ts38 print("Hello, World!")CODE
Over-Commented Block43 hits · 43 pts
SeverityFileLineSnippetContext
LOWwebsite/server/tests/packEventSchema.test.ts1import * as v from 'valibot';COMMENT
LOW…server/tests/processZipFile.gitConfigExecution.test.ts1import { execFileSync } from 'node:child_process';COMMENT
LOWwebsite/server/src/middlewares/turnstile.ts41 isProduction: () => boolean;COMMENT
LOWwebsite/server/src/middlewares/turnstile.ts61// - siteverify success: false → 403 with `outcome: turnstile_failed`.COMMENT
LOWwebsite/server/src/utils/clientInfo.ts41COMMENT
LOWwebsite/server/src/actions/packEventSchema.ts1import * as v from 'valibot';COMMENT
LOWwebsite/client/composables/useTurnstile.ts1import { onBeforeUnmount, ref } from 'vue';COMMENT
LOWwebsite/client/composables/useTurnstile.ts41 // copy and the timeout/callback closures verify it before mutating sharedCOMMENT
LOWwebsite/client/composables/useTurnstile.ts101 pendingReject(new Error(`Turnstile error: ${errorCode}`));COMMENT
LOWwebsite/client/composables/turnstileSubmit.ts1// Helpers for translating Turnstile token-acquisition outcomes into theCOMMENT
LOWwebsite/client/composables/usePreMintDebounce.ts1import { onBeforeUnmount, type Ref, watch } from 'vue';COMMENT
LOWwebsite/client/composables/useTurnstileTokenCache.ts1// Token cache for Cloudflare Turnstile. Decoupled from widget lifecycle soCOMMENT
LOWwebsite/client/composables/useTurnstileScript.ts21 size?: 'normal' | 'compact' | 'flexible';COMMENT
LOWwebsite/client/.vitepress/config.ts1import { defineConfig } from 'vitepress';COMMENT
LOWwebsite/client/utils/botDetect.ts1import { isbot } from 'isbot';COMMENT
LOWwebsite/client/components/api/client.ts61}COMMENT
LOWtests/core/file/dotIgnoreSpec.test.ts1import fs from 'node:fs/promises';COMMENT
LOWtests/core/file/fileSearch.gitignoreBackslash.test.ts1import fs from 'node:fs/promises';COMMENT
LOWtests/core/file/emptyDirectorySpec.test.ts1import fs from 'node:fs/promises';COMMENT
LOWtests/core/file/binaryDetectionSpec.test.ts1import fs from 'node:fs/promises';COMMENT
LOWtests/core/file/processOrderSpec.test.ts1import { describe, expect, it, vi } from 'vitest';COMMENT
LOWtests/core/file/processOrderSpec.test.ts61 output: { showLineNumbers: true },COMMENT
LOWtests/core/file/fileRead.test.ts141 // Regression: prior to the UTF-8-first reorder, certain valid-UTF-8COMMENT
LOWtests/core/file/fileSearch.gitignoreSpec.test.ts1import fs from 'node:fs/promises';COMMENT
LOWtests/core/security/securityScanSpec.test.ts21} from '../../../src/core/security/workers/securityCheckWorker.js';COMMENT
LOWtests/core/packager/multiRootSpec.test.ts21// path via a Map, which silently collapsed entries when the same relative pathCOMMENT
LOWtests/testing/vitestSetup.ts1// Disable the token-count disk cache by default for the entire test suite soCOMMENT
LOWscripts/bench-cores.sh1#!/bin/bashCOMMENT
LOW.github/workflows/npm-publish.yml1name: npm-publishCOMMENT
LOW.github/workflows/mcp-registry-publish.yml61 # The registry verifies npm ownership by reading `mcpName` from theCOMMENT
LOWsrc/core/metrics/tokenCountCache.ts221 * cannot leave a torn JSON file. Caller should await this so newly producedCOMMENT
LOWsrc/core/file/fileRead.ts81 // This halves the number of I/O operations per file.COMMENT
LOWsrc/core/security/workers/securityCheckWorker.ts1import perf_hooks from 'node:perf_hooks';COMMENT
LOWsrc/core/security/workers/securityCheckWorker.ts21// of pure profiler bookkeeping per worker with zero functional benefit —COMMENT
LOWsrc/core/security/workers/securityCheckWorker.ts41// other code in the main process that relies on the Node built-in. ByCOMMENT
LOWsrc/core/git/gitMetadataEndpoint.ts1import { RepomixError } from '../../shared/errorHandle.js';COMMENT
LOWsrc/mcp/tools/packCodebaseTool.ts161 output: outputFilePath,COMMENT
LOWsrc/shared/urlRedact.ts41// each iteration consumes exactly one '@' — so it cannot backtrack quadraticallyCOMMENT
LOWsrc/cli/actions/defaultAction.ts41 // the user's own project. A remote clone is a throwaway temp dir whose legacyCOMMENT
LOWsrc/cli/actions/remoteAction.ts181 // above. runDefaultAction rejects --force without --skill-generate, soCOMMENT
LOWsrc/cli/prompts/remoteConfigTrustPrompt.ts21const CONFIG_LINE_PREFIX = '| ';COMMENT
LOWsrc/cli/prompts/remoteConfigTrustPrompt.ts221 }COMMENT
LOWsrc/cli/prompts/remoteConfigTrustStore.ts1import { createHash } from 'node:crypto';COMMENT
Structural Annotation Overuse19 hits · 30 pts
SeverityFileLineSnippetContext
LOW.agents/clawhub/SKILL.md75### Step 1: Pack the RepositoryCOMMENT
LOW.agents/clawhub/SKILL.md93### Step 2: Check Command OutputCOMMENT
LOW.agents/clawhub/SKILL.md103### Step 3: Analyze the OutputCOMMENT
LOW.agents/clawhub/SKILL.md126### Step 4: Report FindingsCOMMENT
LOW.claude/plugins/repomix-explorer/agents/explorer.md76### Step 1: Pack the RepositoryCOMMENT
LOW.claude/plugins/repomix-explorer/agents/explorer.md116### Step 2: Check Command OutputCOMMENT
LOW.claude/plugins/repomix-explorer/agents/explorer.md126### Step 3: Analyze the Output FileCOMMENT
LOW.claude/plugins/repomix-explorer/agents/explorer.md144### Step 4: Provide InsightsCOMMENT
LOWskills/repomix-explorer/SKILL.md66### Step 1: Pack the RepositoryCOMMENT
LOWskills/repomix-explorer/SKILL.md106### Step 2: Check Command OutputCOMMENT
LOWskills/repomix-explorer/SKILL.md116### Step 3: Analyze the Output FileCOMMENT
LOWskills/repomix-explorer/SKILL.md134### Step 4: Provide InsightsCOMMENT
LOWsrc/core/skill/packSkill.ts218 // Step 1: Generate skill references (summary, structure, files, tech-stacks)COMMENT
LOWsrc/core/skill/packSkill.ts237 // Step 2: Calculate metrics from files section to get accurate token countCOMMENT
LOWsrc/core/skill/packSkill.ts251 // Step 3: Generate SKILL.md with accurate token countCOMMENT
LOW⚡src/cli/actions/initAction.ts23 // Step 1: Ask if user wants to create a config fileCOMMENT
LOW⚡src/cli/actions/initAction.ts26 // Step 2: Ask if user wants to create a .repomixignore fileCOMMENT
LOWsrc/cli/prompts/skillPrompts.ts53 // Step 1: Ask for skill locationCOMMENT
LOWsrc/cli/prompts/skillPrompts.ts77 // Step 2: Check if directory exists and ask for overwriteCOMMENT
Hyper-Verbose Identifiers15 hits · 18 pts
SeverityFileLineSnippetContext
LOWwebsite/server/src/middlewares/cloudflareGuard.ts15export function cloudflareGuardMiddleware() {CODE
LOWwebsite/server/src/middlewares/cloudflareGuard.ts16 return async function cloudflareGuardMiddleware(c: Context, next: Next) {CODE
LOWwebsite/client/composables/useTurnstileTokenCache.ts34export function createTurnstileTokenCache(mint: () => Promise<string>): TurnstileTokenCache {CODE
LOWwebsite/client/components/Home/TryIt.vue201function updateUrlFromCurrentState() {CODE
LOWwebsite/client/components/Home/TryItPackOptions.vue43function handleIncludePatternsUpdate(patterns: string) {CODE
LOWwebsite/client/components/Home/TryItPackOptions.vue49function handleIgnorePatternsUpdate(patterns: string) {CODE
LOW⚡website/client/components/Home/TryItPackOptions.vue61function handleDirectoryStructureToggle(enabled: boolean) {CODE
LOW⚡website/client/components/Home/TryItPackOptions.vue67function handleRemoveCommentsToggle(enabled: boolean) {CODE
LOW⚡website/client/components/Home/TryItPackOptions.vue73function handleRemoveEmptyLinesToggle(enabled: boolean) {CODE
LOW⚡website/client/components/Home/TryItPackOptions.vue79function handleShowLineNumbersToggle(enabled: boolean) {CODE
LOW⚡website/client/components/Home/TryItPackOptions.vue85function handleOutputParsableToggle(enabled: boolean) {CODE
LOW…src/vi/guide/development/using-repomix-as-a-library.md228async function processAndModifyOutput() {CODE
LOWbrowser/entrypoints/content.ts24function isRepomixButtonAlreadyExists(): boolean {CODE
LOWsrc/core/treeSitter/languageConfig.ts220export function getLanguageConfigByExtension(extension: string): LanguageConfig | undefined {CODE
LOWsrc/mcp/tools/attachPackedOutputTool.ts183function extractFileMetricsMarkdown(content: string): { filePaths: string[]; fileCharCounts: Record<string, number> } {CODE
Verbosity Indicators7 hits · 12 pts
SeverityFileLineSnippetContext
LOWsrc/core/skill/packSkill.ts218 // Step 1: Generate skill references (summary, structure, files, tech-stacks)COMMENT
LOWsrc/core/skill/packSkill.ts237 // Step 2: Calculate metrics from files section to get accurate token countCOMMENT
LOWsrc/core/skill/packSkill.ts251 // Step 3: Generate SKILL.md with accurate token countCOMMENT
LOW⚡src/cli/actions/initAction.ts23 // Step 1: Ask if user wants to create a config fileCOMMENT
LOW⚡src/cli/actions/initAction.ts26 // Step 2: Ask if user wants to create a .repomixignore fileCOMMENT
LOWsrc/cli/prompts/skillPrompts.ts53 // Step 1: Ask for skill locationCOMMENT
LOWsrc/cli/prompts/skillPrompts.ts77 // Step 2: Check if directory exists and ask for overwriteCOMMENT
AI Slop Vocabulary3 hits · 9 pts
SeverityFileLineSnippetContext
MEDIUM.github/workflows/benchmark.yml116 # Run comprehensive memory testCOMMENT
MEDIUMsrc/core/git/gitLogHandle.ts7// Null character used as record separator in git log output for robust parsingCOMMENT
MEDIUMsrc/core/git/gitLogHandle.ts33 // This is more robust than splitting by double newlines, as commit messages may contain newlinesCOMMENT
Self-Referential Comments2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMtests/core/treeSitter/parseFile.ruby.test.ts38 # Create a module methodCOMMENT
MEDIUMtests/core/treeSitter/parseFile.ruby.test.ts48 # Create a user and greetCOMMENT
Synthetic Comment Markers1 hit · 5 pts
SeverityFileLineSnippetContext
HIGH.agents/agents/reviewer-code-quality.md82- **Do not flag**: Formatting, style, import ordering, naming conventions (unless genuinely misleading), TODOs (unless iCODE
Fake / Example Data4 hits · 4 pts
SeverityFileLineSnippetContext
LOWwebsite/client/src/hi/guide/custom-instructions.md136 { "id": 1, "name": "John Doe" },CODE
LOWtests/core/file/emptyDirectorySpec.test.ts36 await fs.mkdir(path.join(tmpDir, 'docs', 'placeholder'), { recursive: true });CODE
LOWtests/core/file/emptyDirectorySpec.test.ts53 await fs.mkdir(path.join(tmpDir, 'docs', 'placeholder'), { recursive: true });CODE
LOWtests/mcp/tools/grepRepomixOutputTool.test.ts286 expect(matches[0].line).toBe('user@example.com');CODE
Decorative Section Separators1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMtests/mcp/tools/sandbox.contract.test.ts28// ── escape variants the guard MUST reject (host-aware) ────────────────────────COMMENT
Example Usage Blocks1 hit · 2 pts
SeverityFileLineSnippetContext
LOWscripts/bench-cores.sh5# Usage:COMMENT