A Smart Ethernet Switch for Earth
This report summarizes scanner evidence for zerotier/ZeroTierOne, a C++ project with 17,225 GitHub stars. SynthScan examined 371,032 lines of code across 1198 source files, recording 1417 pattern matches distributed across 10 syntactic categories. The legacy adjusted pattern signal is 3.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 1326 finding(s).
Are imports declared and package/API names verified? 7 finding(s).
Are wrappers, guards, and repeated structures necessary? 84 finding(s).
Which changes need focused human review? 1417 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1417 distinct pattern matches across 10 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | version.h | 41 | #endif | COMMENT |
| LOW | CMakeLists.txt | 41 | # ZT_BUILD_ARCHITECTURE (read by one.cpp via version.h). | COMMENT |
| LOW | selftest.cpp | 1 | /* This Source Code Form is subject to the terms of the Mozilla Public | COMMENT |
| LOW | selftest.cpp | 21 | #include "node/Packet.hpp" | COMMENT |
| LOW | selftest.cpp | 41 | #include <vector> | COMMENT |
| LOW | one.cpp | 21 | #include <time.h> | COMMENT |
| LOW | one.cpp | 41 | #include <dirent.h> | COMMENT |
| LOW | one.cpp | 61 | #include <linux/capability.h> | COMMENT |
| LOW | one.cpp | 81 | #include <algorithm> | COMMENT |
| LOW | one.cpp | 1721 | COMMENT | |
| LOW | nonfree/controller/BigTableStatusWriter.cpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/BigTableStatusWriter.cpp | 121 | const uint64_t keyHash = hasher(row_key); | COMMENT |
| LOW | nonfree/controller/EmbeddedNetworkController.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/EmbeddedNetworkController.hpp | 21 | #include <atomic> | COMMENT |
| LOW | nonfree/controller/CtlUtil.hpp | 41 | // Prefix every controller log line with the controller (node) ID. A single atomic fprintf; | COMMENT |
| LOW | nonfree/controller/RedisListener.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/PubSubListener.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/PubSubWriter.cpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/CentralDB.cpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/CentralDB.cpp | 21 | #include "Redis.hpp" | COMMENT |
| LOW | nonfree/controller/DB.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/PostgreSQL.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/CentralDB.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/ConnectionPool.hpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/EmbeddedNetworkController.cpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | nonfree/controller/EmbeddedNetworkController.cpp | 21 | #include <map> | COMMENT |
| LOW | nonfree/controller/CtlUtil.cpp | 21 | COMMENT | |
| LOW | nonfree/controller/PubSubListener.cpp | 1 | /* (c) ZeroTier, Inc. | COMMENT |
| LOW | include/ZeroTierDebug.h | 21 | #include <unistd.h> | COMMENT |
| LOW | include/ZeroTierDebug.h | 41 | #define ZT_RESET "\x1B[0m" | COMMENT |
| LOW | include/ZeroTierDebug.h | 61 | #ifdef __FreeBSD__ | COMMENT |
| LOW | include/ZeroTierDebug.h | 81 | #endif | COMMENT |
| LOW | include/ZeroTierOne.h | 21 | // clang-format off | COMMENT |
| LOW | include/ZeroTierOne.h | 41 | #pragma comment(lib, "ZeroTierOne_x64d.lib") | COMMENT |
| LOW | include/ZeroTierOne.h | 281 | * Packet characteristics flag: TCP SYN flag | COMMENT |
| LOW | include/ZeroTierOne.h | 301 | #define ZT_REMOTE_TRACE_FIELD__LOCAL_PHYADDR "localPhyAddr" | COMMENT |
| LOW | include/ZeroTierOne.h | 321 | #define ZT_REMOTE_TRACE_FIELD__CREDENTIAL_TIMESTAMP "credTs" | COMMENT |
| LOW | include/ZeroTierOne.h | 341 | #define ZT_REMOTE_TRACE_EVENT__NETWORK_CONFIG_REQUEST_SENT 0x2005 | COMMENT |
| LOW | ext/arm32-neon-salsa2012-asm/salsa2012.h | 1 | #ifndef ZT_SALSA2012_ARM32NEON_ASM | COMMENT |
| LOW | ext/hiredis-0.14.1/win32.h | 1 | #ifndef _WIN32_HELPER_INCLUDE | COMMENT |
| LOW | ext/hiredis-0.14.1/win32.h | 41 | #endif | COMMENT |
| LOW | ext/hiredis-0.14.1/sdsalloc.h | 41 | #define s_realloc realloc | COMMENT |
| LOW | ext/hiredis-0.14.1/net.c | 41 | #include <netinet/tcp.h> | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 1 | #include "fmacros.h" | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 741 | } | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 761 | // __test_callback_flags <<= 8; | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 781 | // redisFree(c); | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 801 | // | COMMENT |
| LOW | ext/hiredis-0.14.1/test.c | 821 | // redisCommandWithCallback(c,__test_reply_callback,(void*)3,"PING"); | COMMENT |
| LOW | ext/hiredis-0.14.1/fmacros.h | 1 | #ifndef __HIREDIS_FMACRO_H | COMMENT |
| LOW | ext/hiredis-0.14.1/read.h | 41 | * error that occurred. REDIS_ERR_IO means there was an I/O error and you | COMMENT |
| LOW | ext/hiredis-0.14.1/include/hiredis/win32.h | 1 | #ifndef _WIN32_HELPER_INCLUDE | COMMENT |
| LOW | ext/hiredis-0.14.1/include/hiredis/win32.h | 41 | #endif | COMMENT |
| LOW | ext/hiredis-0.14.1/include/hiredis/sdsalloc.h | 41 | #define s_realloc realloc | COMMENT |
| LOW | ext/hiredis-0.14.1/include/hiredis/fmacros.h | 1 | #ifndef __HIREDIS_FMACRO_H | COMMENT |
| LOW | ext/hiredis-0.14.1/include/hiredis/read.h | 41 | * error that occurred. REDIS_ERR_IO means there was an I/O error and you | COMMENT |
| LOW | ext/inja/inja.hpp | 41 | #endif | COMMENT |
| LOW | ext/inja/inja.hpp | 61 | #include <sstream> | COMMENT |
| LOW | ext/inja/inja.hpp | 81 | // #include "node.hpp" | COMMENT |
| LOW | ext/inja/inja.hpp | 901 | #include <string> | COMMENT |
| 1231 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | CMakeLists.txt | 273 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 279 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 284 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 286 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 568 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 570 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 580 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | CMakeLists.txt | 582 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 6 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 8 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 34 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 48 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 327 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 334 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 409 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 411 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 487 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 489 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 649 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | CMakeLists.txt | 651 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 169 | # ---------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 178 | # -------------------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 480 | # ------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 529 | # --------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 575 | # ---------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 598 | # -------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 622 | # ------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 646 | # ------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 679 | # ------------------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 691 | # -------------------------------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 712 | # ---------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 731 | # -------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 740 | # ------------------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 776 | # ----------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 789 | # ----------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 801 | # ----------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 812 | # --------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 838 | # --------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 886 | # ------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 924 | # ------------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1014 | # -------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1030 | # -------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1095 | # -------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1147 | # ------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1177 | # --------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1207 | # ----------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1232 | # ------------------------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1261 | # ---------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1282 | # ------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1295 | # ----------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1308 | # ---------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1333 | # ----------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1350 | # --------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1483 | # ----------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1495 | # --------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1512 | # ------------------------------------ | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1523 | # --------------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1646 | # ---------------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1663 | # --------------------- | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1697 | # -------------------------- | COMMENT |
| 21 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ext/libpqxx-7.7.3/tools/template2mak.py | 83 | # This file is generated automatically by libpqxx's {script} script, and | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 1402 | # This file is a library for parsing options in your shell scripts along | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2594 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2604 | # This function implements the same check as func_lalib_p without | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2627 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2637 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2662 | # This function is only a basic sanity check; it will hardly flush out | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 2802 | # Create a libtool object file (analogous to a ".la" file), | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 7570 | # Create the object directory. | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 10249 | # Create the old-style object. | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 10269 | # Create an invalid libtool object if no PIC, so that we don't | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 331 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 5319 | # Sed substitution that helps us do robust quoting. It backslashifies | COMMENT |
| MEDIUM | ext/libpqxx-7.7.3/config/ltmain.sh | 9271 | # This code stresses the "libraries are programs" paradigm to its | COMMENT |
| MEDIUM | …i-only/include/opentelemetry/trace/span_startoptions.h | 45 | // more nuanced parent identification: | COMMENT |
| MEDIUM | …de/opentelemetry/nostd/internal/absl/base/attributes.h | 41 | // are not defined as such in any file). To utilize the following | COMMENT |
| MEDIUM | …clude/opentelemetry/nostd/internal/absl/base/options.h | 42 | // Diamond dependency problems can be avoided if all packages utilize the same | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rometheus-cpp-lite-1.0/core/include/prometheus/gauge.h | 113 | /// Example usage: | COMMENT |
| LOW | …metheus-cpp-lite-1.0/core/include/prometheus/counter.h | 98 | /// Example usage: | COMMENT |
| LOW | …ometheus-cpp-lite-1.0/core/include/prometheus/family.h | 329 | /// Example usage: | COMMENT |
| LOW | …theus-cpp-lite-1.0/core/include/prometheus/histogram.h | 128 | /// Example usage: | COMMENT |
| LOW | …metheus-cpp-lite-1.0/core/include/prometheus/summary.h | 128 | /// Example usage: | COMMENT |
| LOW | scripts/bootstrap-deps.sh | 19 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ext/libpqxx-7.7.3/tools/template2mak.py | 19 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/template2mak.py | 19 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/template2mak.py | 19 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/test_all.py | 12 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/m4esc.py | 10 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/m4esc.py | 10 | CODE | |
| LOW | ext/libpqxx-7.7.3/tools/m4esc.py | 10 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ubuntu22.04/amd64/include/sw/redis++/connection_pool.h | 145 | // NOTE: This class is similar to `SafeConnection`. | COMMENT |
| LOW | …ubuntu22.04/arm64/include/sw/redis++/connection_pool.h | 145 | // NOTE: This class is similar to `SafeConnection`. | COMMENT |
| LOW | …redis-plus-plus-1.3.3/src/sw/redis++/connection_pool.h | 145 | // NOTE: This class is similar to `SafeConnection`. | COMMENT |
| LOW | …edis-plus-plus-1.3.3/src/sw/redis++/async_connection.h | 361 | // NOTE: This class is similar to `SafeAsyncConnection`. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 623 | # Set func_arith_result to the result of evaluating TERMs. | COMMENT |
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 647 | # Set func_basename_result to FILE with everything up to and including | COMMENT |
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 813 | # Set func_len_result to the length of STRING. STRING may not | COMMENT |
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 1031 | # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. | COMMENT |
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 4003 | # Check if any of the arguments is a wrapper script. | COMMENT |
| LOW | ext/libpqxx-7.7.3/config/ltmain.sh | 9972 | # Loop over the list of objects to be linked. | COMMENT |
| LOW | pkg/qnap/zerotier/qpkg.cfg | 46 | # Set value to 1 means to open the QPKG's Web UI inside QTS desktop instead of new window. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ext/libpqxx-7.7.3/tools/test_all.py | 261 | except Exception as error: | CODE |
| LOW | ext/libpqxx-7.7.3/tools/test_all.py | 416 | except Exception as error: | CODE |
| LOW | ext/libpqxx-7.7.3/tools/test_all.py | 437 | except Exception as error: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …lude/opentelemetry/semconv/incubating/aws_attributes.h | 24 | href="https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html">guardrail</a> helps | CODE |