{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T15:18:42.465167Z","repo":{"ref":{"host":"github.com","owner":"CodeEditApp","name":"CodeEdit"},"default_branch":"main","clone_url":"https://github.com/CodeEditApp/CodeEdit.git","html_url":"https://github.com/CodeEditApp/CodeEdit","description":"📝 CodeEdit App for macOS – Elevate your code editing experience. Open source, free forever.","stars":23119,"forks":1197,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":21911,"primary_language":"Swift","license_spdx":"MIT","created_at":"2022-03-10T21:28:14Z","pushed_at":"2026-10-17T18:45:36Z","security_policy_url":null,"distribution":{"owner_created_at":"2022-03-13T05:59:48Z","owner_type":"Organization","release_assets":[{"name":"appcast.xml","size":26362,"download_count":791182,"release_tag":"v0.3.6","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.6/appcast.xml"},{"name":"CodeEdit.dmg","size":35962501,"download_count":47078,"release_tag":"v0.3.6","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.6/CodeEdit.dmg"},{"name":"appcast.xml","size":75788,"download_count":83942,"release_tag":"v0.3.5","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.5/appcast.xml"},{"name":"CodeEdit.dmg","size":35095199,"download_count":5659,"release_tag":"v0.3.5","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.5/CodeEdit.dmg"},{"name":"appcast.xml","size":33570,"download_count":142757,"release_tag":"v0.3.4","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.4/appcast.xml"},{"name":"CodeEdit.dmg","size":33845014,"download_count":10716,"release_tag":"v0.3.4","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.4/CodeEdit.dmg"},{"name":"appcast.xml","size":26415,"download_count":148414,"release_tag":"v0.3.3","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.3/appcast.xml"},{"name":"CodeEdit.dmg","size":34752294,"download_count":10478,"release_tag":"v0.3.3","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.3/CodeEdit.dmg"},{"name":"appcast.xml","size":6645,"download_count":97688,"release_tag":"v0.3.2","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.2/appcast.xml"},{"name":"CodeEdit.dmg","size":32542357,"download_count":9100,"release_tag":"v0.3.2","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.2/CodeEdit.dmg"},{"name":"appcast.xml","size":7649,"download_count":17129,"release_tag":"v0.3.1","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.1/appcast.xml"},{"name":"CodeEdit.dmg","size":32509339,"download_count":3315,"release_tag":"v0.3.1","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.1/CodeEdit.dmg"},{"name":"appcast.xml","size":6378,"download_count":5311,"release_tag":"v0.3.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.0/appcast.xml"},{"name":"CodeEdit.dmg","size":32477352,"download_count":1689,"release_tag":"v0.3.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.0/CodeEdit.dmg"},{"name":"appcast.xml","size":2893,"download_count":11820,"release_tag":"v0.2.1","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.2.1/appcast.xml"},{"name":"CodeEdit.dmg","size":32163574,"download_count":3310,"release_tag":"v0.2.1","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.2.1/CodeEdit.dmg"},{"name":"appcast.xml","size":29105,"download_count":3462,"release_tag":"v0.2.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.2.0/appcast.xml"},{"name":"CodeEdit.dmg","size":32163491,"download_count":1783,"release_tag":"v0.2.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.2.0/CodeEdit.dmg"},{"name":"appcast.xml","size":42840,"download_count":66490,"release_tag":"v0.1.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.1.0/appcast.xml"},{"name":"CodeEdit.dmg","size":30817722,"download_count":10214,"release_tag":"v0.1.0","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.1.0/CodeEdit.dmg"}]}},"commit_sha":"fa2aebd86373211c78626074b53ab75010767575","profile":{"lines_by_language":{"Swift":60490,"Shell":616,"Ruby":12,"C":12},"files_by_category":{"source":686,"binary":55,"other":50,"config":46,"docs":36,"generated":1},"source_lines":61130,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.0105,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":1.0,"flagged_releases":0.0,"style_index":0.147},"summary":"Weak signals consistent with AI-assisted development."},"quality":{"score":64.5,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":81.3,"duplication":62.3,"lint":99.9,"testing":25.0,"docs":80.0,"type_safety":null,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 7% of function code in complex or long functions; 8% duplicated lines. Weakest area: testing."},"security":{"score":55.8,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":65.9,"sast":99.1,"dependencies":58.7,"ci_actions":1.3,"posture":20.0,"scorecard":null},"summary":"Security posture is weak: 1 possible secret(s) in the tree, 0 only in history; 18 known vulnerabilities in 4 dependencies; 15 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":1759.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":124956.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2022-03":{"loc":23387,"attributed_loc":0},"2022-04":{"loc":17196,"attributed_loc":0},"2022-05":{"loc":3295,"attributed_loc":0},"2022-06":{"loc":2614,"attributed_loc":0},"2022-07":{"loc":647,"attributed_loc":0},"2022-08":{"loc":1229,"attributed_loc":0},"2022-09":{"loc":1012,"attributed_loc":0},"2022-10":{"loc":163,"attributed_loc":0},"2022-11":{"loc":309,"attributed_loc":0},"2022-12":{"loc":3501,"attributed_loc":0},"2023-01":{"loc":4343,"attributed_loc":0},"2023-02":{"loc":610,"attributed_loc":0},"2023-03":{"loc":3646,"attributed_loc":0},"2023-04":{"loc":3443,"attributed_loc":0},"2023-05":{"loc":4287,"attributed_loc":0},"2023-06":{"loc":3174,"attributed_loc":0},"2023-07":{"loc":620,"attributed_loc":0},"2023-08":{"loc":463,"attributed_loc":0},"2023-09":{"loc":2029,"attributed_loc":0},"2023-10":{"loc":2681,"attributed_loc":0},"2023-11":{"loc":82,"attributed_loc":0},"2023-12":{"loc":5404,"attributed_loc":0},"2024-01":{"loc":2571,"attributed_loc":0},"2024-02":{"loc":761,"attributed_loc":0},"2024-03":{"loc":937,"attributed_loc":0},"2024-04":{"loc":1261,"attributed_loc":0},"2024-05":{"loc":1304,"attributed_loc":0},"2024-06":{"loc":4344,"attributed_loc":0},"2024-07":{"loc":3811,"attributed_loc":0},"2024-08":{"loc":3334,"attributed_loc":0},"2024-09":{"loc":2173,"attributed_loc":0},"2024-10":{"loc":1050,"attributed_loc":0},"2024-11":{"loc":547,"attributed_loc":0},"2024-12":{"loc":1544,"attributed_loc":0},"2025-01":{"loc":1451,"attributed_loc":0},"2025-02":{"loc":93,"attributed_loc":0},"2025-03":{"loc":1977,"attributed_loc":0},"2025-04":{"loc":337,"attributed_loc":0},"2025-05":{"loc":1860,"attributed_loc":0},"2025-06":{"loc":974,"attributed_loc":0},"2025-07":{"loc":6122,"attributed_loc":0},"2025-08":{"loc":386,"attributed_loc":0},"2025-09":{"loc":2965,"attributed_loc":0},"2025-12":{"loc":90,"attributed_loc":0},"2026-08":{"loc":929,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"work_units":847.0,"flagged_units":1.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":120059.0,"flagged_loc":1312.0,"flagged_loc_share":0.010927960419460432,"max_loc_per_hour":905.5214723926381,"median_loc_per_hour":13.432046265369124,"pr_timed_units":480.0,"excluded_import_loc":4897.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"1,312 lines of first-party code in ~1.4h (906 lines/hour, PR #436)","ref":"55c4a15393a2c66cd8e2e622f8712855d8f2cd3e","url":"https://github.com/CodeEditApp/CodeEdit/commit/55c4a15393a2c66cd8e2e622f8712855d8f2cd3e","weight":0.2716564417177914}],"data":{"flagged_loc_by_commit":{"55c4a15393a2c66cd8e2e622f8712855d8f2cd3e":1312},"excluded_import_commits":["f9de9c036ceb8a8f4d124654b15240b1c96cbc0e"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-5","metrics":{"releases":37.0,"flagged_releases":0.0,"max_loc_per_day":4164.8},"findings":[],"evidence":[],"data":{"releases":[{"from":"0.0.1-alpha.10","to":"0.0.1-alpha.11","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"0.0.1-alpha.11","to":"0.0.1-alpha.12","loc":232,"days":0.74,"loc_per_day":311.8,"flagged":false},{"from":"0.0.1-alpha.12","to":"0.0.1-alpha.13","loc":0,"days":0.09,"loc_per_day":0.0,"flagged":false},{"from":"0.0.1-alpha.13","to":"0.0.1-alpha.14","loc":66,"days":0.16,"loc_per_day":424.4,"flagged":false},{"from":"0.0.1-alpha.14","to":"0.0.1-alpha.15","loc":156,"days":0.81,"loc_per_day":191.7,"flagged":false},{"from":"0.0.1-alpha.15","to":"0.0.1-alpha.16","loc":1556,"days":0.37,"loc_per_day":4164.8,"flagged":false},{"from":"0.0.1-alpha.16","to":"0.0.1-alpha.17","loc":130,"days":0.06,"loc_per_day":2143.5,"flagged":false},{"from":"0.0.1-alpha.17","to":"0.0.1-alpha.18","loc":17,"days":1.63,"loc_per_day":10.4,"flagged":false},{"from":"0.0.1-alpha.18","to":"0.0.1-alpha.19","loc":466,"days":1.81,"loc_per_day":258.2,"flagged":false},{"from":"0.0.1-alpha.19","to":"0.0.1-alpha.20","loc":404,"days":0.45,"loc_per_day":898.9,"flagged":false},{"from":"0.0.1-alpha.20","to":"0.0.1-alpha.21","loc":469,"days":1.68,"loc_per_day":279.1,"flagged":false},{"from":"0.0.1-alpha.21","to":"0.0.1-alpha.22","loc":397,"days":2.45,"loc_per_day":161.8,"flagged":false},{"from":"0.0.1-alpha.22","to":"0.0.1-alpha.23","loc":50,"days":0.05,"loc_per_day":1038.5,"flagged":false},{"from":"0.0.1-alpha.23","to":"0.0.1-alpha.24","loc":42,"days":1.87,"loc_per_day":22.4,"flagged":false},{"from":"0.0.1-alpha.24","to":"0.0.1-alpha.25","loc":95,"days":7.5,"loc_per_day":12.7,"flagged":false},{"from":"0.0.1-alpha.25","to":"0.0.2-alpha.26","loc":76,"days":18.34,"loc_per_day":4.1,"flagged":false},{"from":"0.0.2-alpha.26","to":"0.0.2-alpha.27","loc":429,"days":5.71,"loc_per_day":75.2,"flagged":false},{"from":"0.0.2-alpha.27","to":"0.0.2-alpha.28","loc":77,"days":10.32,"loc_per_day":7.5,"flagged":false},{"from":"0.0.2-alpha.28","to":"0.0.3-alpha.29","loc":1639,"days":1.52,"loc_per_day":1075.7,"flagged":false},{"from":"0.0.3-alpha.29","to":"0.0.3-alpha.30","loc":161,"days":1.29,"loc_per_day":124.4,"flagged":false},{"from":"0.0.3-alpha.30","to":"0.0.3-alpha.31","loc":1266,"days":10.36,"loc_per_day":122.2,"flagged":false},{"from":"0.0.3-alpha.31","to":"0.0.3-alpha.32","loc":513,"days":14.75,"loc_per_day":34.8,"flagged":false},{"from":"0.0.3-alpha.32","to":"0.0.3-alpha.33","loc":9629,"days":71.4,"loc_per_day":134.9,"flagged":false},{"from":"0.0.3-alpha.33","to":"0.0.3-alpha.34","loc":8,"days":0.04,"loc_per_day":192.0,"flagged":false},{"from":"0.0.3-alpha.34","to":"0.0.3-alpha.35","loc":0,"days":0.31,"loc_per_day":0.0,"flagged":false},{"from":"0.0.3-alpha.35","to":"0.0.3-alpha.36","loc":2059,"days":48.08,"loc_per_day":42.8,"flagged":false},{"from":"0.0.3-alpha.36","to":"0.0.3-alpha.37","loc":10487,"days":149.33,"loc_per_day":70.2,"flagged":false},{"from":"0.0.3-alpha.37","to":"v0.1.0","loc":3932,"days":79.19,"loc_per_day":49.7,"flagged":false},{"from":"v0.1.0","to":"v0.2.0","loc":8745,"days":123.86,"loc_per_day":70.6,"flagged":false},{"from":"v0.2.0","to":"v0.2.1","loc":181,"days":7.7,"loc_per_day":23.5,"flagged":false},{"from":"v0.2.1","to":"v0.3.0","loc":4293,"days":21.04,"loc_per_day":204.1,"flagged":false},{"from":"v0.3.0","to":"v0.3.1","loc":618,"days":8.18,"loc_per_day":75.5,"flagged":false},{"from":"v0.3.1","to":"v0.3.2","loc":921,"days":21.16,"loc_per_day":43.5,"flagged":false},{"from":"v0.3.2","to":"v0.3.3","loc":4494,"days":89.65,"loc_per_day":50.1,"flagged":false},{"from":"v0.3.3","to":"v0.3.4","loc":4119,"days":115.09,"loc_per_day":35.8,"flagged":false},{"from":"v0.3.4","to":"v0.3.5","loc":3154,"days":91.85,"loc_per_day":34.3,"flagged":false},{"from":"v0.3.5","to":"v0.3.6","loc":6380,"days":48.04,"loc_per_day":132.8,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":61130.0,"index":0.147,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":18.0,"per_kloc:emoji_in_code":0.294,"files:emoji_in_code":7.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":1.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[{"rule_id":"gitleaks/private-key","severity":"high","message":"Possible private-key secret in the current tree","path":"CodeEdit/Features/Settings/Pages/AccountsSettings/AccountsSettingsDetailsView.swift","line":34,"fingerprint":"CodeEdit/Features/Settings/Pages/AccountsSettings/AccountsSettingsDetailsView.swift:private-key:34"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":6.0,"findings_high":0.0,"findings_medium":6.0,"findings_low":0.0,"weighted_findings":1.5,"scanned_lines":61130.0,"parse_errors":4.0},"findings":[{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"CodeEdit/Features/InspectorArea/InternalDevelopmentInspector/InternalDevelopmentOutputView.swift","line":48,"fingerprint":"swift.lang.crypto.insecure-random:CodeEdit/Features/InspectorArea/InternalDevelopmentInspector/InternalDevelopmentOutputView.swift:48"},{"rule_id":"opengrep/bash.lang.security.ifs-tampering","severity":"medium","message":"The special variable IFS affects how splitting takes place when expanding unquoted variables. Don't set it globally. Prefer a dedicated utility such as 'cut' or 'awk' if you need to split input data. If you must use 'read', set IFS locally using e.g. 'IFS=\",\" read -a my_array'. [confidence low]","path":"CodeEdit/ShellIntegration/codeedit_shell_integration.bash","line":243,"fingerprint":"bash.lang.security.ifs-tampering:CodeEdit/ShellIntegration/codeedit_shell_integration.bash:243"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"CodeEditTests/Features/Welcome/RecentProjectsTests.swift","line":188,"fingerprint":"swift.lang.crypto.insecure-random:CodeEditTests/Features/Welcome/RecentProjectsTests.swift:188"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift","line":46,"fingerprint":"swift.lang.crypto.insecure-random:CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift:46"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift","line":101,"fingerprint":"swift.lang.crypto.insecure-random:CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift:101"},{"rule_id":"opengrep/swift.lang.crypto.insecure-random","severity":"medium","message":"A random number generator was detected which is **not** *guaranteed* to be Cryptographically secure. If the source of entropy is used for security purposes (e.g. with other Cryptographic operations), make sure to use the `SecCopyRandomBytes` API explicitly. [confidence low]","path":"CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift","line":102,"fingerprint":"swift.lang.crypto.insecure-random:CodeEditTests/Utils/CEWorkspaceFileManager/CEWorkspaceFileManagerTests.swift:102"}],"evidence":[],"data":{"rulesets":["swift","bash","ruby","c"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":4.0,"vulnerabilities":18.0,"vulns_critical":0.0,"vulns_high":7.0,"vulns_medium":9.0,"vulns_low":2.0,"vulns_unknown":0.0,"penalty":32.0},"findings":[{"rule_id":"osv/GHSA-h27x-rffw-24p4","severity":"high","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-h27x-rffw-24p4","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-h27x-rffw-24p4"},{"rule_id":"osv/GHSA-h8w8-99g7-qmvj","severity":"high","message":"concurrent-ruby@1.1.7 (RubyGems) is affected by GHSA-h8w8-99g7-qmvj","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"concurrent-ruby@1.1.7 (RubyGems):GHSA-h8w8-99g7-qmvj"},{"rule_id":"osv/GHSA-98m9-hrrm-r99r","severity":"high","message":"faraday@1.3.0 (RubyGems) is affected by GHSA-98m9-hrrm-r99r","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"faraday@1.3.0 (RubyGems):GHSA-98m9-hrrm-r99r"},{"rule_id":"osv/GHSA-2rxp-v6pw-ch6m","severity":"high","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-2rxp-v6pw-ch6m","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-2rxp-v6pw-ch6m"},{"rule_id":"osv/GHSA-5866-49gr-22v4","severity":"high","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-5866-49gr-22v4","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-5866-49gr-22v4"},{"rule_id":"osv/GHSA-r55c-59qm-vjw6","severity":"high","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-r55c-59qm-vjw6","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-r55c-59qm-vjw6"},{"rule_id":"osv/GHSA-vmwr-mc7x-5vc3","severity":"high","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-vmwr-mc7x-5vc3","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-vmwr-mc7x-5vc3"},{"rule_id":"osv/GHSA-8gmh-2hhj-2hv9","severity":"medium","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-8gmh-2hhj-2hv9","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-8gmh-2hhj-2hv9"},{"rule_id":"osv/GHSA-9crm-g4mf-wc5j","severity":"medium","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-9crm-g4mf-wc5j","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-9crm-g4mf-wc5j"},{"rule_id":"osv/GHSA-9f42-57jx-vpp3","severity":"medium","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-9f42-57jx-vpp3","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-9f42-57jx-vpp3"},{"rule_id":"osv/GHSA-j82w-28jv-3pmj","severity":"medium","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-j82w-28jv-3pmj","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-j82w-28jv-3pmj"},{"rule_id":"osv/GHSA-qq38-m9mg-xjj5","severity":"medium","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-qq38-m9mg-xjj5","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-qq38-m9mg-xjj5"},{"rule_id":"osv/GHSA-wv3x-4vxv-whpp","severity":"medium","message":"concurrent-ruby@1.1.7 (RubyGems) is affected by GHSA-wv3x-4vxv-whpp","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"concurrent-ruby@1.1.7 (RubyGems):GHSA-wv3x-4vxv-whpp"},{"rule_id":"osv/GHSA-33mh-2634-fwr2","severity":"medium","message":"faraday@1.3.0 (RubyGems) is affected by GHSA-33mh-2634-fwr2","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"faraday@1.3.0 (RubyGems):GHSA-33mh-2634-fwr2"},{"rule_id":"osv/GHSA-4xqq-m2hx-25v8","severity":"medium","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-4xqq-m2hx-25v8","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-4xqq-m2hx-25v8"},{"rule_id":"osv/GHSA-vg3r-rm7w-2xgh","severity":"medium","message":"rexml@3.2.5 (RubyGems) is affected by GHSA-vg3r-rm7w-2xgh","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"rexml@3.2.5 (RubyGems):GHSA-vg3r-rm7w-2xgh"},{"rule_id":"osv/GHSA-539f-xcgw-2gjg","severity":"low","message":"addressable@2.8.0 (RubyGems) is affected by GHSA-539f-xcgw-2gjg","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"addressable@2.8.0 (RubyGems):GHSA-539f-xcgw-2gjg"},{"rule_id":"osv/GHSA-6wx8-w4f5-wwcr","severity":"low","message":"concurrent-ruby@1.1.7 (RubyGems) is affected by GHSA-6wx8-w4f5-wwcr","path":"AppCast/Gemfile.lock","line":null,"fingerprint":"concurrent-ruby@1.1.7 (RubyGems):GHSA-6wx8-w4f5-wwcr"}],"evidence":[],"data":{"ecosystems":["RubyGems"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":11.0,"findings":52.0,"findings_high":15.0,"findings_medium":28.0,"findings_low":9.0,"penalty":262.6},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/CI-bump-build-number.yml","line":10,"fingerprint":"unpinned-uses:.github/workflows/CI-bump-build-number.yml:10"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/CI-bump-build-number.yml","line":27,"fingerprint":"unpinned-uses:.github/workflows/CI-bump-build-number.yml:27"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/CI-bump-build-number.yml","line":33,"fingerprint":"unpinned-uses:.github/workflows/CI-bump-build-number.yml:33"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/add-to-project.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/add-to-project.yml:13"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/appcast.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/appcast.yml:11"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/appcast.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/appcast.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/appcast.yml","line":25,"fingerprint":"unpinned-uses:.github/workflows/appcast.yml:25"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/appcast.yml","line":45,"fingerprint":"unpinned-uses:.github/workflows/appcast.yml:45"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/issue.yml","line":9,"fingerprint":"unpinned-uses:.github/workflows/issue.yml:9"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/lint.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/lint.yml:11"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/pre-release.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/pre-release.yml:13"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/pre-release.yml","line":116,"fingerprint":"unpinned-uses:.github/workflows/pre-release.yml:116"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/pre-release.yml","line":161,"fingerprint":"unpinned-uses:.github/workflows/pre-release.yml:161"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release-drafter.yml","line":13,"fingerprint":"unpinned-uses:.github/workflows/release-drafter.yml:13"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/tests.yml","line":11,"fingerprint":"unpinned-uses:.github/workflows/tests.yml:11"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/CI-bump-build-number.yml","line":9,"fingerprint":"artipacked:.github/workflows/CI-bump-build-number.yml:9"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-bump-build-number.yml","line":5,"fingerprint":"excessive-permissions:.github/workflows/CI-bump-build-number.yml:5"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pre-release.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/CI-pre-release.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pre-release.yml","line":5,"fingerprint":"excessive-permissions:.github/workflows/CI-pre-release.yml:5"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pre-release.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/CI-pre-release.yml:9"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pre-release.yml","line":14,"fingerprint":"excessive-permissions:.github/workflows/CI-pre-release.yml:14"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pre-release.yml","line":20,"fingerprint":"excessive-permissions:.github/workflows/CI-pre-release.yml:20"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/CI-pre-release.yml","line":7,"fingerprint":"secrets-inherit:.github/workflows/CI-pre-release.yml:7"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/CI-pre-release.yml","line":12,"fingerprint":"secrets-inherit:.github/workflows/CI-pre-release.yml:12"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/CI-pre-release.yml","line":18,"fingerprint":"secrets-inherit:.github/workflows/CI-pre-release.yml:18"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pull-request.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/CI-pull-request.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pull-request.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/CI-pull-request.yml:8"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-pull-request.yml","line":12,"fingerprint":"excessive-permissions:.github/workflows/CI-pull-request.yml:12"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/CI-pull-request.yml","line":10,"fingerprint":"secrets-inherit:.github/workflows/CI-pull-request.yml:10"},{"rule_id":"zizmor/secrets-inherit","severity":"medium","message":"secrets unconditionally inherited by called workflow [confidence high]","path":".github/workflows/CI-pull-request.yml","line":15,"fingerprint":"secrets-inherit:.github/workflows/CI-pull-request.yml:15"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/CI-release-notes.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/CI-release-notes.yml:9"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/add-to-project.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/add-to-project.yml:9"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/appcast.yml","line":7,"fingerprint":"excessive-permissions:.github/workflows/appcast.yml:7"},{"rule_id":"zizmor/archived-uses","severity":"medium","message":"action or reusable workflow from archived repository [confidence high]","path":".github/workflows/appcast.yml","line":25,"fingerprint":"archived-uses:.github/workflows/appcast.yml:25"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/issue.yml","line":6,"fingerprint":"excessive-permissions:.github/workflows/issue.yml:6"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/lint.yml","line":11,"fingerprint":"artipacked:.github/workflows/lint.yml:11"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/lint.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/lint.yml:8"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/pre-release.yml","line":12,"fingerprint":"artipacked:.github/workflows/pre-release.yml:12"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/pre-release.yml","line":8,"fingerprint":"excessive-permissions:.github/workflows/pre-release.yml:8"},{"rule_id":"zizmor/archived-uses","severity":"medium","message":"action or reusable workflow from archived repository [confidence high]","path":".github/workflows/pre-release.yml","line":161,"fingerprint":"archived-uses:.github/workflows/pre-release.yml:161"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/release-drafter.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/release-drafter.yml:9"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/tests.yml","line":10,"fingerprint":"artipacked:.github/workflows/tests.yml:10"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/tests.yml","line":6,"fingerprint":"excessive-permissions:.github/workflows/tests.yml:6"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pre-release.yml","line":7,"fingerprint":"self-repository:.github/workflows/CI-pre-release.yml:7"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pre-release.yml","line":12,"fingerprint":"self-repository:.github/workflows/CI-pre-release.yml:12"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pre-release.yml","line":18,"fingerprint":"self-repository:.github/workflows/CI-pre-release.yml:18"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pre-release.yml","line":23,"fingerprint":"self-repository:.github/workflows/CI-pre-release.yml:23"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pull-request.yml","line":10,"fingerprint":"self-repository:.github/workflows/CI-pull-request.yml:10"},{"rule_id":"zizmor/self-repository","severity":"low","message":"use GitHub's dedicated self-repository syntax [confidence high]","path":".github/workflows/CI-pull-request.yml","line":15,"fingerprint":"self-repository:.github/workflows/CI-pull-request.yml:15"},{"rule_id":"zizmor/adhoc-packages","severity":"low","message":"ad-hoc installation of packages [confidence high]","path":".github/workflows/appcast.yml","line":34,"fingerprint":"adhoc-packages:.github/workflows/appcast.yml:34"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/pre-release.yml","line":155,"fingerprint":"template-injection:.github/workflows/pre-release.yml:155"},{"rule_id":"zizmor/template-injection","severity":"low","message":"code injection via template expansion [confidence high]","path":".github/workflows/pre-release.yml","line":155,"fingerprint":"template-injection:.github/workflows/pre-release.yml:155"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":1.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":10.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release v0.3.6 ships CodeEdit.dmg (47078 downloads)","ref":"CodeEdit.dmg","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.6/CodeEdit.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v0.3.5 ships CodeEdit.dmg (5659 downloads)","ref":"CodeEdit.dmg","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.5/CodeEdit.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v0.3.4 ships CodeEdit.dmg (10716 downloads)","ref":"CodeEdit.dmg","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.4/CodeEdit.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v0.3.3 ships CodeEdit.dmg (10478 downloads)","ref":"CodeEdit.dmg","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.3/CodeEdit.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release v0.3.2 ships CodeEdit.dmg (9100 downloads)","ref":"CodeEdit.dmg","url":"https://github.com/CodeEditApp/CodeEdit/releases/download/v0.3.2/CodeEdit.dmg","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":2874.0,"function_nloc":36303.0,"mean_ccn":2.49,"p90_ccn":5.0,"complex_functions":19.0,"long_functions":12.0,"many_param_functions":25.0,"risky_nloc_share":0.0692},"findings":[],"evidence":[{"kind":"complex-function","description":"fileIcon in CodeEdit/Features/CEWorkspace/Models/CEWorkspaceFileIcon.swift: complexity 35, 75 lines","ref":"CodeEdit/Features/CEWorkspace/Models/CEWorkspaceFileIcon.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CEWorkspace/Models/CEWorkspaceFileIcon.swift#L96","weight":0.5833333333333334},{"kind":"complex-function","description":"body in CodeEdit/Features/Editor/Views/EditorAreaView.swift: complexity 29, 117 lines","ref":"CodeEdit/Features/Editor/Views/EditorAreaView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Editor/Views/EditorAreaView.swift#L44","weight":0.48333333333333334},{"kind":"complex-function","description":"lspLanguage in CodeEdit/Utils/Extensions/LanguageIdentifier/LanguageIdentifier+CodeLanguage.swift: complexity 29, 71 lines","ref":"CodeEdit/Utils/Extensions/LanguageIdentifier/LanguageIdentifier+CodeLanguage.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Utils/Extensions/LanguageIdentifier/LanguageIdentifier+CodeLanguage.swift#L12","weight":0.48333333333333334},{"kind":"complex-function","description":"makeTabDragGesture in CodeEdit/Features/Editor/TabBar/Tabs/Views/EditorTabs.swift: complexity 27, 100 lines","ref":"CodeEdit/Features/Editor/TabBar/Tabs/Views/EditorTabs.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Editor/TabBar/Tabs/Views/EditorTabs.swift#L101","weight":0.45},{"kind":"complex-function","description":"content in CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabView.swift: complexity 23, 94 lines","ref":"CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabView.swift#L123","weight":0.38333333333333336},{"kind":"complex-function","description":"set in CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift: complexity 22, 26 lines","ref":"CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift#L406","weight":0.36666666666666664},{"kind":"complex-function","description":"get in CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift: complexity 22, 26 lines","ref":"CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Settings/Pages/ThemeSettings/Models/Theme.swift#L380","weight":0.36666666666666664},{"kind":"complex-function","description":"body in CodeEdit/Features/CodeEditUI/Views/SearchPanelView.swift: complexity 20, 91 lines","ref":"CodeEdit/Features/CodeEditUI/Views/SearchPanelView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CodeEditUI/Views/SearchPanelView.swift#L54","weight":0.3333333333333333},{"kind":"complex-function","description":"body in CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabBackground.swift: complexity 18, 35 lines","ref":"CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabBackground.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Editor/TabBar/Tabs/Tab/EditorTabBackground.swift#L28","weight":0.3},{"kind":"complex-function","description":"body in CodeEdit/Features/Settings/SettingsView.swift: complexity 18, 93 lines","ref":"CodeEdit/Features/Settings/SettingsView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Settings/SettingsView.swift#L152","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":40642.0,"duplicated_lines":3201.0,"duplicated_share":0.0788,"files":686.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/ActivityViewer/Tasks/SchemeDropDownView.swift:34 and CodeEdit/Features/ActivityViewer/Tasks/TaskDropDownView.swift:22","ref":"CodeEdit/Features/ActivityViewer/Tasks/SchemeDropDownView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/ActivityViewer/Tasks/SchemeDropDownView.swift#L34","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/ActivityViewer/Tasks/TasksPopoverMenuItem.swift:34 and CodeEdit/Features/ActivityViewer/Tasks/WorkspaceMenuItemView.swift:17","ref":"CodeEdit/Features/ActivityViewer/Tasks/TasksPopoverMenuItem.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/ActivityViewer/Tasks/TasksPopoverMenuItem.swift#L34","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/CEWorkspaceSettings/Views/CEWorkspaceSettingsView.swift:56 and CodeEdit/Features/Settings/Pages/TextEditingSettings/InvisiblesSettingsView.swift:103","ref":"CodeEdit/Features/CEWorkspaceSettings/Views/CEWorkspaceSettingsView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CEWorkspaceSettings/Views/CEWorkspaceSettingsView.swift#L56","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/CodeEditUI/Styles/CapsuleButtonStyle.swift:11 and CodeEdit/Features/CodeEditUI/Styles/IconButtonStyle.swift:11","ref":"CodeEdit/Features/CodeEditUI/Styles/CapsuleButtonStyle.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CodeEditUI/Styles/CapsuleButtonStyle.swift#L11","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelTabBar.swift:111 and CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelTabBar.swift:133","ref":"CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelTabBar.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelTabBar.swift#L111","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelView.swift:25 and CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelView.swift:51","ref":"CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelView.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/CodeEditUI/Views/WorkspacePanel/WorkspacePanelView.swift#L25","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/Documents/Controllers/CodeEditDocumentController.swift:22 and CodeEdit/Features/Documents/Controllers/CodeEditDocumentController.swift:41","ref":"CodeEdit/Features/Documents/Controllers/CodeEditDocumentController.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Documents/Controllers/CodeEditDocumentController.swift#L22","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/Documents/Indexer/SearchIndexer+File.swift:26 and CodeEdit/Features/Documents/Indexer/SearchIndexer+File.swift:73","ref":"CodeEdit/Features/Documents/Indexer/SearchIndexer+File.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Documents/Indexer/SearchIndexer+File.swift#L26","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/Documents/Indexer/SearchIndexer+Memory.swift:18 and CodeEdit/Features/Documents/Indexer/SearchIndexer+Memory.swift:48","ref":"CodeEdit/Features/Documents/Indexer/SearchIndexer+Memory.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Documents/Indexer/SearchIndexer+Memory.swift#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: CodeEdit/Features/Documents/WorkspaceDocument/WorkspaceDocument.swift:273 and CodeEdit/Features/Editor/Models/Editor/Editor.swift:304","ref":"CodeEdit/Features/Documents/WorkspaceDocument/WorkspaceDocument.swift","url":"https://github.com/CodeEditApp/CodeEdit/blob/fa2aebd86373211c78626074b53ab75010767575/CodeEdit/Features/Documents/WorkspaceDocument/WorkspaceDocument.swift#L273","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":1.0,"weighted_findings":0.25,"scanned_lines":61130.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"CodeEdit/ShellIntegration/codeedit_shell_integration.bash","line":238,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:CodeEdit/ShellIntegration/codeedit_shell_integration.bash:238"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":1.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":61130.0,"test_ratio":0.0,"ci_files":11.0,"cochange_share":0.0,"cochange_commits":211.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/CI-bump-build-number.yml","ref":".github/workflows/CI-bump-build-number.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/CI-pre-release.yml","ref":".github/workflows/CI-pre-release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/CI-pull-request.yml","ref":".github/workflows/CI-pull-request.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/CI-release-notes.yml","ref":".github/workflows/CI-release-notes.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/add-to-project.yml","ref":".github/workflows/add-to-project.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/appcast.yml","ref":".github/workflows/appcast.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/issue.yml","ref":".github/workflows/issue.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/lint.yml","ref":".github/workflows/lint.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/pre-release.yml","ref":".github/workflows/pre-release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release-drafter.yml","ref":".github/workflows/release-drafter.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (swiftlint)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":["swiftlint"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":0.0,"readme_lines":249.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE.md","ref":"LICENSE.md","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}