{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:06.981928Z","repo":{"ref":{"host":"github.com","owner":"pzfreo","name":"wormgear"},"default_branch":"main","clone_url":"https://github.com/pzfreo/wormgear.git","html_url":"https://github.com/pzfreo/wormgear","description":"A tool for creating 3D models of worm gears","stars":7,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":3244,"primary_language":"Python","license_spdx":"MIT","created_at":"2026-01-17T11:45:23Z","pushed_at":"2026-08-26T08:48:27Z","security_policy_url":null,"distribution":{"owner_created_at":"2012-05-24T08:07:50Z","owner_type":"User","release_assets":[]}},"commit_sha":"b2e287f9717c851eb2f6dc942f045f72201b6c77","profile":{"lines_by_language":{"Python":27673,"JavaScript":4891,"Shell":392,"TypeScript":241},"files_by_category":{"source":55,"test":41,"config":33,"docs":20,"other":12,"binary":6,"generated":4},"source_lines":20418,"test_lines":12779},"pillars":{"ai_provenance":{"score":74.4,"confidence":0.95,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.744,"suspected_share":0.2287,"estimated_share":0.744,"ai_artifacts":1.0,"flagged_work_units":3.0,"flagged_releases":0.0,"style_index":1.004},"summary":"Explicit AI attribution on 74% of first-party code added; an estimated 74% including velocity signals."},"quality":{"score":68.5,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":34.2,"duplication":60.5,"lint":48.3,"testing":100.0,"docs":85.0,"type_safety":99.1,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.63, CI runs tests; 36% of function code in complex or long functions; 8% duplicated lines. Weakest area: complexity."},"security":{"score":66.2,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":85.7,"dependencies":76.6,"ci_actions":0.6,"posture":20.0,"scorecard":null},"summary":"Security posture is weak: 5 known vulnerabilities in 2 dependencies; 8 high-severity SAST findings; 24 high-severity workflow issues. Weakest area: ci actions."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":11.0,"checked":11.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":322.0,"attributed_commits":222.0,"attributed_commit_share":0.6894409937888198,"effective_loc":67640.0,"attributed_loc":50324.0,"attributed_loc_share":0.7439976345357776,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 222 attributed commits, 50,324 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"f4f85fdfcca53638787c019c562f65d5993698cb","url":"https://github.com/pzfreo/wormgear/commit/f4f85fdfcca53638787c019c562f65d5993698cb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"d1750b04407ac4f2e730e3af05e95aaa10879cbd","url":"https://github.com/pzfreo/wormgear/commit/d1750b04407ac4f2e730e3af05e95aaa10879cbd","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"f5fc84386025e984b08bf9e30b662c923b86e565","url":"https://github.com/pzfreo/wormgear/commit/f5fc84386025e984b08bf9e30b662c923b86e565","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"c068ab9b8ebc23146b6577a2dcc1b18671801ffb","url":"https://github.com/pzfreo/wormgear/commit/c068ab9b8ebc23146b6577a2dcc1b18671801ffb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: PR description attribution","ref":"7d288bce80ab396da13ed906a439441bc752a147","url":"https://github.com/pzfreo/wormgear/commit/7d288bce80ab396da13ed906a439441bc752a147","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"164b21f165814193db56a735ba11eadb78db1977","url":"https://github.com/pzfreo/wormgear/commit/164b21f165814193db56a735ba11eadb78db1977","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"24d43d3cf32455a4a8f415af0e2d48cf8a92c6aa","url":"https://github.com/pzfreo/wormgear/commit/24d43d3cf32455a4a8f415af0e2d48cf8a92c6aa","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"10bc00ec65de5db8c0e3560ba0a22e79226c00fb","url":"https://github.com/pzfreo/wormgear/commit/10bc00ec65de5db8c0e3560ba0a22e79226c00fb","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"0b8e3c889f263dc2cc5181f034938bad38953828","url":"https://github.com/pzfreo/wormgear/commit/0b8e3c889f263dc2cc5181f034938bad38953828","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"118660820a0c5b8247edbefa7a3842ac2ca07db6","url":"https://github.com/pzfreo/wormgear/commit/118660820a0c5b8247edbefa7a3842ac2ca07db6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"246f594f01e73f0c59286c7a16af758c286650c9","url":"https://github.com/pzfreo/wormgear/commit/246f594f01e73f0c59286c7a16af758c286650c9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"c814a2db9a9fa871ecdb5d017b5efd70a7b374cc","url":"https://github.com/pzfreo/wormgear/commit/c814a2db9a9fa871ecdb5d017b5efd70a7b374cc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"78f70afe6bea3e1e029ec0ed9f6750cd5f18751d","url":"https://github.com/pzfreo/wormgear/commit/78f70afe6bea3e1e029ec0ed9f6750cd5f18751d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"a0f20229a6a4acaf1775bdfc97782d73f78f131e","url":"https://github.com/pzfreo/wormgear/commit/a0f20229a6a4acaf1775bdfc97782d73f78f131e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"bf157a8e3c10d36530ac68bb4916834fa01868fc","url":"https://github.com/pzfreo/wormgear/commit/bf157a8e3c10d36530ac68bb4916834fa01868fc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"bc4ac79519d3de18e01bc49049d5c2652d3d3b9c","url":"https://github.com/pzfreo/wormgear/commit/bc4ac79519d3de18e01bc49049d5c2652d3d3b9c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"821ca41cedfa3f84f785130c15ddb9c495f85bd4","url":"https://github.com/pzfreo/wormgear/commit/821ca41cedfa3f84f785130c15ddb9c495f85bd4","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"244769352fb7687e7c1529a8b1c35a5b590ba2f1","url":"https://github.com/pzfreo/wormgear/commit/244769352fb7687e7c1529a8b1c35a5b590ba2f1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"224fea228047403107e665b06e37409fdfbbac02","url":"https://github.com/pzfreo/wormgear/commit/224fea228047403107e665b06e37409fdfbbac02","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"18a75cb438ee92ef22fe4357a4da01022f3a8a8d","url":"https://github.com/pzfreo/wormgear/commit/18a75cb438ee92ef22fe4357a4da01022f3a8a8d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"98b3cb46a15461290af1bf3efce785486f7070cd","url":"https://github.com/pzfreo/wormgear/commit/98b3cb46a15461290af1bf3efce785486f7070cd","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"77dca30cf97d75d2566cca890a848a4f09e51a18","url":"https://github.com/pzfreo/wormgear/commit/77dca30cf97d75d2566cca890a848a4f09e51a18","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"e95fac8ca2c43a90b59baf04df5679d6b0b5a5b4","url":"https://github.com/pzfreo/wormgear/commit/e95fac8ca2c43a90b59baf04df5679d6b0b5a5b4","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"85083c149e53246bef545acb983e44ba17526ce5","url":"https://github.com/pzfreo/wormgear/commit/85083c149e53246bef545acb983e44ba17526ce5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"c9ddbd312dcc8490eec552d1ddc0f33d6f87df95","url":"https://github.com/pzfreo/wormgear/commit/c9ddbd312dcc8490eec552d1ddc0f33d6f87df95","weight":0.9}],"data":{"attributed_loc_by_commit":{"026175b2674f0621334f3d21f9527bafff4b7b96":0,"61466a5a001bb8e7d41f23f4f2eb6d9e423a83c0":711,"677cf90f15202ae1a49afd2091484084fe851e0c":0,"05dcca0d18d516a6d793e9cb91de8a326239a71d":113,"d7e3cb8d41273f4473520658bd8322bd0e4de36f":97,"9ab060468e3b545b137e6677a26012e8f12d0cd7":147,"1f35e31b03d3e587d7e184d6fca4918bf4e97d9f":4,"f24cfaed7cfc08c84e2dc8e343fec27d41d12d60":130,"3b6c69606f2b6176d79ebbb2a7872e3167d76264":1559,"c635c392e27f20cc8796984a4e8560885ba2d5bb":41,"ff402347b8575d942b948a3ecf55743e8e79a246":184,"52a04aaa1ad8c57659129f3950633a8184965afe":0,"674f4e342aaba5192b8d2089e93e405cc97bbb23":828,"0a9790e6aa6e7a027728822794a1ab3ecf4bd320":96,"12ddca9e75e1401972b5f2097259e31ccfb43112":191,"76c1fead773f8a9668946871e5e28b181a5e794f":161,"0c8e4d7c12251c26a3b331698c0cdeb34ec9ca90":390,"7778846a4642043f34a9010b96e331c278ad24f3":13,"1a02915bd852539facd57a3377810f4005aa857f":0,"05ebb01b8af09f70ca956302fea2b135890759db":0,"b6e2cb585cd09088b3803e312a967507620a872d":0,"5f7e4ba715bc21ce29dbdc8961dec508654255a1":0,"f3529d39ca9556530f8f4bf96b6a2e50ea69e0f6":0,"96c2563ede5001787aeeaf2f15c7e51a4b23a00c":0,"496cd818b269c28e2f38dd9b21998a94e4d75076":12,"5a1474af8c84d84458f330b35d699470a99c129b":5,"49c12eefd42b95559fa9537e97e11d6dc9714bc7":9,"fa9712752c39752e755124539aaafcbec118e3b8":0,"f6930505c30f7db43072e8171b8b8a8d5e759892":0,"2b233672a82dff1350bc1e6e97c9ff99f732e53f":0,"7da93ddc9198d65e74516f8cb090673cb62e21d2":0,"cd9d0de68f38931b727b5f17e36b12e31e221699":892,"3b410de106b02b6ef4aa364f5b61e6d925aaf694":1442,"31cc528795a8f0aeb1dac3c351fa7f35c30776d2":650,"5fd674a5581352d0a8cf858b16dfbe7cc6184ea9":741,"49df0daa5a7c1363f9904253a13a2caf0d84efe5":0,"a2920f654e9a38977fa4adf00ecfa4d0a38bce6e":847,"e9054e5a9d3af30aa677a2994aa2c030fa01602f":0,"8b1bc92603dee9fa8cef63c8058ade773249a769":0,"9441c8bae30cf90a7c7c9cb92019d266ea6d45ca":19,"303e4abcffc95d49dcedfe22dda0818e6695cd40":32,"265ed3c4386a1e041022f0f1c01b1c2637287700":154,"906c91d846d77cc17427a7a7803063b9b6d27e80":154,"67067f1b05b4cbea4aae8176f0265e21f53702be":31,"6ee8faf4dc8b9be561bd8b8296b375ba2bf93831":0,"b61393328cb0c3a5bcbd5183e61dcff3d4598613":33,"3b60d57c1789bbb1af511447f547c73870a0fac5":13,"a9569d4f2325bb1238fb07c73727bd2c5d9b56f3":0,"e51b499addff42f206c12f299792de199bc0afb2":123,"d70bf74a6ce3700da7c2a81f08c0d1c2cd28f5f1":8,"116875c754a582d7be5a194771e4cdba24548f5b":14,"320f786e6e7d329e58c6d54ca32cccaf050e5a47":4,"ab0beae70d643409486225599e0164d377d3dd01":25,"9457a6cae92176a3846a7f23f492518c03927c4d":33,"c0111843070da40de16d6ea927de4bde77fd3559":16,"13535beaf91140bf13813709e07d392319ed2134":21,"efa0a048cc3686b522a5eaad6134e74f03074567":30,"f881e8597ae016072dde497dcbb22881403f6c31":14,"31862256c7487b17420991b735dbd3c939be5e80":53,"44e32d9daf7ca81b36759a8b22f1cab1d02a682d":0,"762a5a1c704574e10de971a8c0440902b0d44d94":0,"bebd306b16595dc68bcfc031d2cdf48487c65e5c":18,"75d37880f314e1ca42d5830801573b7e47d8cde6":37,"5e2ff632cede79b65c92e3c210fed650542aacbe":3,"3f2b637d556affeeacd9d146055f6ddb390a5f33":24,"26a400055bca9c5f5cd428f4be09be492f84c98f":7,"634d18ec1b87a73acf5c27dafaaccce52f3969c7":26,"8f6cdbf56e464c98703f0b5662d6c4157eed486f":6,"c239ca46c94f88723e2af2cd4e383b2e33bd54a8":15,"a52116ce1024b01e3f921ffde9170a4d3fa39762":6,"6ca7ec0cd34d710c2635368f75ea3cdccc10cedd":785,"46b588db7a4b9439ab1d19d57c2aebc8b443e567":440,"9778da4968650ac42dbf83c23f66fa2e0c9e8603":561,"3e9c311e1b6dad083de976c2e4c0b8ab34aea614":6471,"06a486c5c01faa86d22e5ae55b486bc05a27d4bb":52,"61c18da9595b3c8d96c04eb0cce78e4645d38f64":0,"6436f48f0d5043596d4f2df0e24d6420ed5c8927":1016,"e56f273e37752cc496153e789c33a905ff034b68":47,"8f473bdfb80180870ab4c41b5d1ca244fc8e4da8":1,"63a7d0ee59c7d8e80c7e920ff431a26808d583b8":10,"ddf18a080524d69a2790616137c724926fda0f64":57,"80036bb5aa3fbfc16229a3e00d1d22b5f2d82870":21,"2e19cfdce8d768b8d5f650c2b446d45d73ad405b":5,"3409e9ae8ecce7c24e8b754f7184018882c5f854":14,"cb4aaf9031cca238599befdc4854e84bfc6f1b79":8,"d1b54f96935f445468e51a136c9fba8d9ddae43e":4,"d99bf03cf8fa00ddedb67d229cf8cf70b7a863ff":3,"5f8d382edfd0763031a3daac613b205215d0ec6d":136,"704052e4360a767ff3fe7928054bb594412bba0d":2,"d02cd89e297b28a0a9434630df61c9a2643083c3":3,"287d981045f8018264791fd6eb24ca77cd343174":31,"6a9903a7c2f83bd6deae9d141f0008e531dc8f39":25,"484653b36a13fda30885397d6531117e323bddd5":0,"13b16a6c901b5cedf507c935a58e5dd1544e9db6":9,"56334e6a83852064e64a8b89077727a1ad8348b0":18,"9741f1b10222ae5592c506b3e509d3b5a6c15959":32,"720de7545583ad0ff8f1b3ab3d9ca4e24540a635":1457,"988a915af58eec93d856df89060479d517c73e7e":1833,"4c426f9dcdf1c103a61897319bc98b625add52d3":68,"f72db1b31f1df14eb0ce4d5fe5d2f87e03943da8":155,"c6359b1fb1b2d95311c9e3e75feae5299b013db6":0,"24ee9ac25b98d7c7eb178b24600a0028e76593c8":132,"8b5520ce7c069f115bdf734e6e70442bd1c27e3d":1,"96e3fb377842692236b5802a9ca603706f127286":93,"a222372ea0aa2173b26a1b0c4aad075078102bf3":38,"f18967d9595cceb818d51dbd161fed0f78df8a5c":11,"a66f5ea0410501f21582ca11a6d02dce7f19b9cd":3,"b5fcc3de6056fc3fd8ec576b153a76b5df3314c0":21,"dc7260d00ed0bc149d9df92f09844b936ea6763e":0,"6a46e4747545f04a60fc0365b425c6e735d1fb6c":0,"1cdc99fbf69c3678c1a38c75f12175099b2787b6":2492,"66f2f830e2c0fe833c5a09ff1b6c2070ce47ce83":530,"070d75af7bb6f46926dc15e63b039952032f88eb":54,"0ac3c9c87b178722b54d9af0f325cb3db1ed4265":178,"ff68eee3f9f470b8e85e0b36b608b66adc9baf54":55,"9d9c4d5f8e00d40982e0cd07e6e46d8366f17707":680,"0e35a2d24898b682ab5aff3714271550f4a10321":2026,"e0d1741c7559e6b1d8c04b0a56395a1cff5f7ba7":0,"b9bdc09b5709b92853c57213b0922b03013c941e":21,"206b0e55c605dad2fc998321fe432c4d0d88fd51":254,"c105eb55e3cd53dddd9dfd742a23eeca61a6147d":174,"6029e862722a5d138ccca922cc110351f011e626":72,"772d3bacfa34fddce888457f9527413ea6acf0db":37,"f30948b4723bc02c7a7f1209d2a74ebaec55bc60":51,"e1b79a5ba1e457f1c13bb1762926a7e3c338da1e":0,"3d927919297add3b4ced0f6995a8cfa355da905d":1043,"09fc84de2fe185ea44060116e12a7d27b5c6eae0":30,"14a95f03bdc11d7eb84a1d11dc92e00ebd87e30a":0,"7ecd22c86fc97e364c24750e3c65886fd94cb08e":0,"69a0cc53f692ff1bdf7b95b3bdc87a2353839da3":746,"777f44dda44681f27c877e8c1b61fd95d83263a0":78,"b2398ab659af3f388e8c2c92577034932bc2835c":65,"64b2eefa5bd4f8b95c7ab8ff9dbeefa92727fa8b":0,"7debac2206aaec1662dc359e7f9a6005b764d4df":6,"69496a648d8fe2d362ed47ebfb094b6342b423ca":5,"78e6d5f14e55fdebb47ec93639db75794e4259ac":311,"95909a29a9c16edc217750f909c47e16ca173353":9,"1c4b4a3205b9e84a7020566c0f55cd5b3248d8f4":0,"cc8b4b13087721806ed2603b33d28ace038b231c":33,"4de0521be565ba48900f01878d579c6e3138a3b3":5,"088ec548d7ec495595ad4be149a0b55529cbb087":35,"712584fed5ca5b90269ac80f708b5249fc65b58d":0,"c212f4b825f23d66fd0dc0a163cb144ec50e344d":862,"c3ab3ba05d6294d197812d558bb6ec3f87234a8d":85,"c8ea57f165a62aac6ca2961a430d2981e52c8b01":333,"efda1ba87844ef5ea6bfebda16600c76387f4ef7":131,"67bdaf28a35e9c0475d648cc27b6e973b9a33e45":15,"cec5bc2c208c0779151a627063b674a85a7524c3":30,"230cadd9e5cc760084fa7749640a97a26f2806e0":2,"b0c18e9cd21f372eb97d30de0ab5bc38654267e5":3,"088d9846978535b35f85ad2bf947274d784ecf2a":179,"5e9860f2e4d0b3e373a950e718a9d1b5faac277c":41,"f890243903c653aa87e5b29fa07f89ab843b09b4":6,"af98cb98a9dab2d3a42ab40ff661b724e2cbe9ce":2,"21e8d02d8fa749fd4a86d0e4c26823133bba53e0":137,"3b49cfd57a168bf6f981137bf7b203758a7a8897":67,"dcade64b43be7463ea6dde40b3976adf90809a7d":19,"a019821995b01cdd6b2f49351f1ad2df144e2c03":0,"f3f35fd5c8062ee61f9da467185c0cf8c15591e1":12,"a69039c580e81ad92808977141c53ac1693845da":0,"00f6f173ef8931fab0eefd728c3194a02f19947a":0,"296405d73d9bd513412df6653cdfb816ebad1efe":1291,"da7ed3ce0fe594febb2dce80ce5f8421e3a58239":776,"2b4b085e9c921d58825c9e60798cddff796a8ed2":266,"db930f2bbe4730102fbe8e9bb3f0e0ce7a566b2f":61,"e6f93334fdfa9b4bb2ebb6ca864c135c19865110":159,"252d56c3e32a9dc5bac54f9d922d7c1fb6a4b84e":8,"158a1fbe930da6886f26401fdbdaff0e281153c1":14,"348e920a8fd726b9c1d5e0bfd49a2cd6783bdfbe":644,"20436a99ec024d7dbfbc82da7b36a4e7124f2fc4":249,"ab1b36aad8e90c83b77d250b68f2e162998880ad":486,"387304d06723697462ca9bb2bbf27ea6257ef697":209,"ea58a1a8f0a48989d074a082bad25d748c039d4d":2325,"a3fcc070b45dda7be61b6de145b99bc8f84fe268":0,"f83c74b065dee7d778ee4a13a1f281e25f8ee4a2":780,"713c15677b660435c9f2a4105773e78a0e0ce0b2":94,"d3c93f538527ba10f2c1dde6c68ffc16318bfebe":168,"3698400c22b60a80c492b082017460795e709a5f":525,"963e9b87c3c0c2db0cbdaf1730c2a579f6b7b4d5":453,"5df768d52be5c266bf1e5a6f9737de18f1c280a8":505,"c3502d4a78a2370618a08f9f7c227f744d8a4c23":221,"a3341ef3254beaafe2bf9e7c76af6cc3ac3b618d":352,"bc96a9c06260f26128fd952a94c0489d7180cc7d":9,"6b5873a8ab6779bebad9d1b810740b0e28cd790a":197,"3e3fcc24cbb49b3ee5a8172fb263b76fe75a9014":215,"de111c727187a4105ca3c1e5bb883a69bdf95e30":101,"db14601be44717e9c4c8584a3fa58e69446090d7":227,"d87575609c42fb220c4c48dfe67ab7db7b6ffa64":0,"6267ef1ff2ddc4c8d9554b5bafd729763eefa102":896,"889d41e4cefeda3bf6254d0873975dcf396bd62a":516,"07cf8ad712a70358a827c488ea8ec0d31edc43c3":483,"56c1e1ac9adc32d2e0aeb3232be0e19cbee5277f":374,"44df70ee996ae53dd467ed764961d1561ce5bf81":116,"4722bfc2b8caadfcaa4f53ab4570a32d9e7d455e":146,"d23d0477465c37d881712f9399f07018c837aadc":214,"476dbe38fbb1fe7572cc2f250fe2b0dbb881b4e7":379,"b799ea192a1761837b439050ae51f83199648be1":227,"c9ddbd312dcc8490eec552d1ddc0f33d6f87df95":0,"85083c149e53246bef545acb983e44ba17526ce5":147,"e95fac8ca2c43a90b59baf04df5679d6b0b5a5b4":0,"77dca30cf97d75d2566cca890a848a4f09e51a18":0,"98b3cb46a15461290af1bf3efce785486f7070cd":59,"18a75cb438ee92ef22fe4357a4da01022f3a8a8d":28,"224fea228047403107e665b06e37409fdfbbac02":215,"244769352fb7687e7c1529a8b1c35a5b590ba2f1":125,"821ca41cedfa3f84f785130c15ddb9c495f85bd4":0,"bc4ac79519d3de18e01bc49049d5c2652d3d3b9c":43,"bf157a8e3c10d36530ac68bb4916834fa01868fc":0,"a0f20229a6a4acaf1775bdfc97782d73f78f131e":24,"78f70afe6bea3e1e029ec0ed9f6750cd5f18751d":5,"c814a2db9a9fa871ecdb5d017b5efd70a7b374cc":670,"246f594f01e73f0c59286c7a16af758c286650c9":95,"118660820a0c5b8247edbefa7a3842ac2ca07db6":223,"0b8e3c889f263dc2cc5181f034938bad38953828":170,"10bc00ec65de5db8c0e3560ba0a22e79226c00fb":35,"24d43d3cf32455a4a8f415af0e2d48cf8a92c6aa":79,"164b21f165814193db56a735ba11eadb78db1977":0,"7d288bce80ab396da13ed906a439441bc752a147":0,"c068ab9b8ebc23146b6577a2dcc1b18671801ffb":0,"f5fc84386025e984b08bf9e30b662c923b86e565":0,"d1750b04407ac4f2e730e3af05e95aaa10879cbd":29,"f4f85fdfcca53638787c019c562f65d5993698cb":32},"tools":{"claude-code":{"name":"Claude Code","commits":222,"loc":50324,"first_seen":1768651343,"last_seen":1781212599}},"monthly":{"2026-01":{"loc":49436,"attributed_loc":32266},"2026-02":{"loc":12815,"attributed_loc":12728},"2026-03":{"loc":0,"attributed_loc":0},"2026-05":{"loc":5269,"attributed_loc":5269},"2026-06":{"loc":61,"attributed_loc":61},"2026-08":{"loc":59,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1768650974.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/CLAUDE.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"CLAUDE.md","added_at":1768650974}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":137.0,"flagged_units":3.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":67552.0,"flagged_loc":24994.0,"flagged_loc_share":0.3699964471814306,"max_loc_per_hour":2176.982355059417,"median_loc_per_hour":190.58900476000144,"pr_timed_units":122.0,"excluded_import_loc":0.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"16,793 lines of first-party code in ~7.7h (2,177 lines/hour, 37 commit session)","ref":"c966b98b51f8ce5343eb4b72896f3e54ae0c2f05","url":"https://github.com/pzfreo/wormgear/commit/c966b98b51f8ce5343eb4b72896f3e54ae0c2f05","weight":0.6},{"kind":"velocity-burst","description":"6,471 lines of first-party code in ~4.0h (1,611 lines/hour, PR #35)","ref":"3e9c311e1b6dad083de976c2e4c0b8ab34aea614","url":"https://github.com/pzfreo/wormgear/commit/3e9c311e1b6dad083de976c2e4c0b8ab34aea614","weight":0.48324436454155717},{"kind":"velocity-burst","description":"1,730 lines of first-party code in ~3.3h (521 lines/hour, 3 commit session)","ref":"c635c392e27f20cc8796984a4e8560885ba2d5bb","url":"https://github.com/pzfreo/wormgear/commit/c635c392e27f20cc8796984a4e8560885ba2d5bb","weight":0.15639072570519796}],"data":{"flagged_loc_by_commit":{"f24cfaed7cfc08c84e2dc8e343fec27d41d12d60":130,"3b6c69606f2b6176d79ebbb2a7872e3167d76264":1559,"c635c392e27f20cc8796984a4e8560885ba2d5bb":41,"04fcf0e39f22175f4ccb942c712ee0bade0a3b28":418,"fcfebc25ef8f6c00ea2cc515a0f43c89614546ae":50,"c4d7a7c12c81e1af5006b6bc29da301c227b698d":1,"802427d7925558b22ef35aedccd00c27bf414552":6416,"dbf93b70d3e46f9e9866003a3bc2733d3d862ee0":6,"6348e913e2dd17285169d56be8b741a26a88447c":7,"1a86da6a21351c285a6dbc1d3c999c535da6402f":252,"e80b031cef25aad6c940f78d0ff097567999c96c":81,"ad411dc81958f62c19d1a1f9a7fc3eb65db4f095":2,"1c3ace57ac08c0a1caa79ca0ca921cd74db720a3":94,"6e6cf90d19aaa289a2d9c1ba88710a199faf6c99":41,"0b6cc4268f218e0622c6913a98f063737310f730":12,"8d90416a10603cbc4a3de17fddb11f8a6d82f96c":54,"e7506b25264f54ee9938c3b402662deee233fe33":21,"fa8f556024348ba0ef3f9909222d09d09051b22a":166,"51de87a070c11aa5730604afd2015796158f1a27":34,"4b3439db20686a301c808e87d8411096f25322ca":6353,"9ca3763fd61d59dbf3504a173fd0b6dc82d7f413":14,"4369711df51c566199d00a37cd9e0fe44215f723":603,"0c69dfca61a8499be3a17b19679a96cabfce92e9":12,"d648d42923bf89f4a6c9281e4d03bd6f5fff7408":50,"f1d1daeeebfe443212a69d3e0db7a3aef0e7be42":731,"6436f48f0d5043596d4f2df0e24d6420ed5c8927":1016,"e56f273e37752cc496153e789c33a905ff034b68":47,"8f473bdfb80180870ab4c41b5d1ca244fc8e4da8":1,"63a7d0ee59c7d8e80c7e920ff431a26808d583b8":10,"ddf18a080524d69a2790616137c724926fda0f64":57,"80036bb5aa3fbfc16229a3e00d1d22b5f2d82870":21,"2e19cfdce8d768b8d5f650c2b446d45d73ad405b":5,"3409e9ae8ecce7c24e8b754f7184018882c5f854":14,"cb4aaf9031cca238599befdc4854e84bfc6f1b79":8,"d1b54f96935f445468e51a136c9fba8d9ddae43e":4,"d99bf03cf8fa00ddedb67d229cf8cf70b7a863ff":3,"5f8d382edfd0763031a3daac613b205215d0ec6d":136,"704052e4360a767ff3fe7928054bb594412bba0d":2,"d02cd89e297b28a0a9434630df61c9a2643083c3":3,"c966b98b51f8ce5343eb4b72896f3e54ae0c2f05":48,"3e9c311e1b6dad083de976c2e4c0b8ab34aea614":6471},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":55.0,"flagged_releases":0.0,"max_loc_per_day":11792.4},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.0.2","to":"v0.0.3","loc":1,"days":0.04,"loc_per_day":24.0,"flagged":false},{"from":"v0.0.3","to":"v0.0.4","loc":93,"days":0.04,"loc_per_day":2232.0,"flagged":false},{"from":"v0.0.4","to":"v0.0.5","loc":38,"days":0.04,"loc_per_day":912.0,"flagged":false},{"from":"v0.0.5","to":"v0.0.6","loc":14,"days":0.04,"loc_per_day":336.0,"flagged":false},{"from":"v0.0.6","to":"v0.0.7","loc":21,"days":0.04,"loc_per_day":504.0,"flagged":false},{"from":"v0.0.7","to":"v0.0.8","loc":3989,"days":1.54,"loc_per_day":2594.9,"flagged":false},{"from":"v0.0.8","to":"v0.0.9","loc":2026,"days":0.49,"loc_per_day":4139.0,"flagged":false},{"from":"v0.0.9","to":"v0.0.10","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.0.10","to":"v0.0.11","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.0.11","to":"v0.0.12","loc":21,"days":0.48,"loc_per_day":44.1,"flagged":false},{"from":"v0.0.12","to":"v0.0.13","loc":254,"days":0.05,"loc_per_day":5043.8,"flagged":false},{"from":"v0.0.13","to":"v0.0.14","loc":334,"days":0.17,"loc_per_day":1952.3,"flagged":false},{"from":"v0.0.14","to":"v0.0.15","loc":1043,"days":0.28,"loc_per_day":3751.8,"flagged":false},{"from":"v0.0.15","to":"v0.0.16","loc":30,"days":0.04,"loc_per_day":720.0,"flagged":false},{"from":"v0.0.16","to":"v0.0.17","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.0.17","to":"v0.0.18","loc":746,"days":1.0,"loc_per_day":742.7,"flagged":false},{"from":"v0.0.18","to":"v0.0.19","loc":78,"days":0.86,"loc_per_day":91.1,"flagged":false},{"from":"v0.0.19","to":"v0.0.20","loc":65,"days":0.64,"loc_per_day":102.1,"flagged":false},{"from":"v0.0.20","to":"v0.0.21","loc":6,"days":0.04,"loc_per_day":144.0,"flagged":false},{"from":"v0.0.21","to":"v0.0.22","loc":5,"days":0.04,"loc_per_day":120.0,"flagged":false},{"from":"v0.0.22","to":"v0.0.23","loc":311,"days":0.31,"loc_per_day":1007.4,"flagged":false},{"from":"v0.0.23","to":"v0.0.24","loc":9,"days":0.07,"loc_per_day":121.6,"flagged":false},{"from":"v0.0.24","to":"v0.0.25","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.0.25","to":"v0.0.26","loc":33,"days":0.11,"loc_per_day":297.0,"flagged":false},{"from":"v0.0.26","to":"v0.0.27","loc":5,"days":0.45,"loc_per_day":11.0,"flagged":false},{"from":"v0.0.27","to":"v0.0.28","loc":35,"days":0.04,"loc_per_day":840.0,"flagged":false},{"from":"v0.0.28","to":"v0.0.29","loc":862,"days":0.12,"loc_per_day":7393.7,"flagged":false},{"from":"v0.0.29","to":"v0.0.30","loc":85,"days":3.89,"loc_per_day":21.8,"flagged":false},{"from":"v0.0.30","to":"v0.0.31","loc":479,"days":0.1,"loc_per_day":4738.4,"flagged":false},{"from":"v0.0.31","to":"v0.0.32","loc":30,"days":0.1,"loc_per_day":294.5,"flagged":false},{"from":"v0.0.32","to":"v0.0.33","loc":2,"days":0.04,"loc_per_day":48.0,"flagged":false},{"from":"v0.0.33","to":"v0.0.34","loc":3,"days":0.04,"loc_per_day":72.0,"flagged":false},{"from":"v0.0.34","to":"v0.0.35","loc":179,"days":0.83,"loc_per_day":215.0,"flagged":false},{"from":"v0.0.35","to":"v0.0.36","loc":41,"days":0.04,"loc_per_day":984.0,"flagged":false},{"from":"v0.0.36","to":"v0.0.37","loc":8,"days":0.16,"loc_per_day":49.5,"flagged":false},{"from":"v0.0.37","to":"v0.0.38","loc":137,"days":0.11,"loc_per_day":1202.1,"flagged":false},{"from":"v0.0.38","to":"v0.0.39","loc":67,"days":0.04,"loc_per_day":1608.0,"flagged":false},{"from":"v0.0.39","to":"v0.0.40","loc":19,"days":0.04,"loc_per_day":456.0,"flagged":false},{"from":"v0.0.40","to":"v0.0.41","loc":12,"days":1.55,"loc_per_day":7.8,"flagged":false},{"from":"v0.0.41","to":"v0.0.42","loc":1291,"days":2.05,"loc_per_day":630.7,"flagged":false},{"from":"v0.0.42","to":"v0.0.43","loc":1284,"days":0.41,"loc_per_day":3143.3,"flagged":false},{"from":"v0.0.43","to":"v0.0.44","loc":1675,"days":2.05,"loc_per_day":816.9,"flagged":false},{"from":"v0.0.44","to":"v0.0.45","loc":3199,"days":0.61,"loc_per_day":5252.5,"flagged":false},{"from":"v0.0.45","to":"v0.0.46","loc":693,"days":0.26,"loc_per_day":2717.5,"flagged":false},{"from":"v0.0.46","to":"v0.0.47","loc":958,"days":0.08,"loc_per_day":11792.4,"flagged":false},{"from":"v0.0.47","to":"v0.0.48","loc":573,"days":0.43,"loc_per_day":1322.6,"flagged":false},{"from":"v0.0.48","to":"v0.0.49","loc":9,"days":0.04,"loc_per_day":216.0,"flagged":false},{"from":"v0.0.49","to":"v0.0.50","loc":197,"days":0.06,"loc_per_day":3349.2,"flagged":false},{"from":"v0.0.50","to":"v0.0.51","loc":543,"days":0.44,"loc_per_day":1226.6,"flagged":false},{"from":"v0.0.51","to":"v0.1.0a1","loc":3498,"days":96.92,"loc_per_day":36.1,"flagged":false},{"from":"v0.1.0a1","to":"v0.1.0a2","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.1.0a2","to":"v0.1.0","loc":302,"days":0.68,"loc_per_day":443.9,"flagged":false},{"from":"v0.1.0","to":"v0.1.1","loc":125,"days":0.15,"loc_per_day":854.7,"flagged":false},{"from":"v0.1.1","to":"v0.1.2","loc":43,"days":0.1,"loc_per_day":441.1,"flagged":false},{"from":"v0.1.2","to":"v0.2.0","loc":1301,"days":5.96,"loc_per_day":218.3,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":20418.0,"index":1.004,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":41.0,"per_kloc:emoji_in_code":2.008,"files:emoji_in_code":8.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":20.0,"findings_high":8.0,"findings_medium":12.0,"findings_low":0.0,"weighted_findings":9.0,"scanned_lines":20418.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/app.js","line":407,"fingerprint":"javascript.browser.security.insecure-document-method:web/app.js:407"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `container.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/app.js","line":407,"fingerprint":"javascript.browser.security.insecure-innerhtml:web/app.js:407"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/app.js","line":712,"fingerprint":"javascript.browser.security.insecure-document-method:web/app.js:712"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `document.getElementById('spec-sheet').innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/app.js","line":712,"fingerprint":"javascript.browser.security.insecure-innerhtml:web/app.js:712"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/modules/bore-calculator.js","line":58,"fingerprint":"javascript.browser.security.insecure-document-method:web/modules/bore-calculator.js:58"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/modules/bore-calculator.js","line":58,"fingerprint":"javascript.browser.security.insecure-innerhtml:web/modules/bore-calculator.js:58"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/modules/generator-ui.js","line":132,"fingerprint":"javascript.browser.security.insecure-document-method:web/modules/generator-ui.js:132"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `summary.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"web/modules/generator-ui.js","line":132,"fingerprint":"javascript.browser.security.insecure-innerhtml:web/modules/generator-ui.js:132"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":348,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:348"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":349,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:349"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":351,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:351"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":379,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:379"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":382,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:382"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":404,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:404"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/app.js","line":712,"fingerprint":"javascript.lang.security.html-in-template-string:web/app.js:712"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/modules/bore-calculator.js","line":56,"fingerprint":"javascript.lang.security.html-in-template-string:web/modules/bore-calculator.js:56"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/modules/format-utils.js","line":185,"fingerprint":"javascript.lang.security.html-in-template-string:web/modules/format-utils.js:185"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/modules/format-utils.js","line":207,"fingerprint":"javascript.lang.security.html-in-template-string:web/modules/format-utils.js:207"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/modules/generator-ui.js","line":65,"fingerprint":"javascript.lang.security.html-in-template-string:web/modules/generator-ui.js:65"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"web/modules/generator-ui.js","line":68,"fingerprint":"javascript.lang.security.html-in-template-string:web/modules/generator-ui.js:68"}],"evidence":[],"data":{"rulesets":["python","javascript","bash","typescript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":2.0,"vulnerabilities":5.0,"vulns_critical":0.0,"vulns_high":4.0,"vulns_medium":1.0,"vulns_low":0.0,"vulns_unknown":0.0,"penalty":16.0},"findings":[{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"web/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"web/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.2.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"web/package-lock.json","line":null,"fingerprint":"js-yaml@4.2.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.23 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"web/package-lock.json","line":null,"fingerprint":"lodash@4.17.23 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-f23m-r3pf-42rh","severity":"medium","message":"lodash@4.17.23 (npm) is affected by GHSA-f23m-r3pf-42rh","path":"web/package-lock.json","line":null,"fingerprint":"lodash@4.17.23 (npm):GHSA-f23m-r3pf-42rh"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":4.0,"findings":41.0,"findings_high":24.0,"findings_medium":9.0,"findings_low":8.0,"penalty":312.0},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":20,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:20"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":49,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:49"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":61,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:61"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":64,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:64"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":99,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:99"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":102,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:102"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":119,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:119"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":122,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:122"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":140,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:140"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":143,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:143"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/deploy-web.yml","line":31,"fingerprint":"unpinned-uses:.github/workflows/deploy-web.yml:31"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/deploy-web.yml","line":34,"fingerprint":"unpinned-uses:.github/workflows/deploy-web.yml:34"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/deploy-web.yml","line":55,"fingerprint":"unpinned-uses:.github/workflows/deploy-web.yml:55"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/deploy-web.yml","line":61,"fingerprint":"unpinned-uses:.github/workflows/deploy-web.yml:61"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:12"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":15,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:15"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":26,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:26"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":53,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:53"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":59,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:59"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":89,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:89"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/publish.yml","line":95,"fingerprint":"unpinned-uses:.github/workflows/publish.yml:95"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-web-build.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/test-web-build.yml:22"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/test-web-build.yml","line":25,"fingerprint":"unpinned-uses:.github/workflows/test-web-build.yml:25"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":10,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:10"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":58,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:58"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":96,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:96"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":116,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:116"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":137,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:137"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/publish.yml","line":1,"fingerprint":"excessive-permissions:.github/workflows/publish.yml:1"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/publish.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/publish.yml:9"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/test-web-build.yml","line":18,"fingerprint":"excessive-permissions:.github/workflows/test-web-build.yml:18"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":17,"fingerprint":"artipacked:.github/workflows/ci.yml:17"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":61,"fingerprint":"artipacked:.github/workflows/ci.yml:61"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":99,"fingerprint":"artipacked:.github/workflows/ci.yml:99"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":119,"fingerprint":"artipacked:.github/workflows/ci.yml:119"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":140,"fingerprint":"artipacked:.github/workflows/ci.yml:140"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/deploy-web.yml","line":30,"fingerprint":"artipacked:.github/workflows/deploy-web.yml:30"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/publish.yml","line":12,"fingerprint":"artipacked:.github/workflows/publish.yml:12"},{"rule_id":"zizmor/artipacked","severity":"low","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/test-web-build.yml","line":22,"fingerprint":"artipacked:.github/workflows/test-web-build.yml:22"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":0.9,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":438.0,"function_nloc":10720.0,"mean_ccn":5.8,"p90_ccn":13.0,"complex_functions":35.0,"long_functions":12.0,"many_param_functions":19.0,"risky_nloc_share":0.3573},"findings":[],"evidence":[{"kind":"complex-function","description":"main in src/wormgear/cli/generate.py: complexity 125, 322 lines","ref":"src/wormgear/cli/generate.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/cli/generate.py#L902","weight":1.0},{"kind":"complex-function","description":"loadDesignIntoDesignTab in web/app.js: complexity 42, 116 lines","ref":"web/app.js","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/web/app.js#L112","weight":0.7},{"kind":"complex-function","description":"to_markdown in src/wormgear/calculator/output.py: complexity 40, 153 lines","ref":"src/wormgear/calculator/output.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/calculator/output.py#L179","weight":0.6666666666666666},{"kind":"complex-function","description":"handleProgress in web/modules/generator-ui.js: complexity 38, 57 lines","ref":"web/modules/generator-ui.js","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/web/modules/generator-ui.js#L394","weight":0.6333333333333333},{"kind":"complex-function","description":"create_hub in src/wormgear/core/features.py: complexity 31, 117 lines","ref":"src/wormgear/core/features.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/features.py#L793","weight":0.5166666666666667},{"kind":"complex-function","description":"buildSpecRows in web/modules/format-utils.js: complexity 31, 76 lines","ref":"web/modules/format-utils.js","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/web/modules/format-utils.js#L150","weight":0.5166666666666667},{"kind":"complex-function","description":"interpret_changes in scripts/compare_step.py: complexity 30, 69 lines","ref":"scripts/compare_step.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/scripts/compare_step.py#L138","weight":0.5},{"kind":"complex-function","description":"_simulate_hobbing in src/wormgear/core/virtual_hobbing.py: complexity 30, 145 lines","ref":"src/wormgear/core/virtual_hobbing.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/virtual_hobbing.py#L769","weight":0.5},{"kind":"complex-function","description":"updateSubProgress in web/modules/generator-ui.js: complexity 27, 88 lines","ref":"web/modules/generator-ui.js","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/web/modules/generator-ui.js#L231","weight":0.45},{"kind":"complex-function","description":"validateCalculatorInputs in web/modules/schema-validator.js: complexity 27, 54 lines","ref":"web/modules/schema-validator.js","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/web/modules/schema-validator.js#L166","weight":0.45}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":15233.0,"duplicated_lines":1276.0,"duplicated_share":0.0838,"files":55.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/__init__.py:33 and src/wormgear/__init__.py:195","ref":"src/wormgear/__init__.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/__init__.py#L33","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/__init__.py:70 and src/wormgear/core/__init__.py:92","ref":"src/wormgear/__init__.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/__init__.py#L70","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/calculator/core.py:475 and src/wormgear/calculator/core.py:661","ref":"src/wormgear/calculator/core.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/calculator/core.py#L475","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/calculator/output.py:196 and src/wormgear/calculator/output.py:403","ref":"src/wormgear/calculator/output.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/calculator/output.py#L196","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/cli/generate.py:1102 and src/wormgear/cli/generate.py:1120","ref":"src/wormgear/cli/generate.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/cli/generate.py#L1102","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/core/features.py:557 and src/wormgear/core/features.py:572","ref":"src/wormgear/core/features.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/features.py#L557","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/core/globoid_worm.py:51 and src/wormgear/core/worm.py:54","ref":"src/wormgear/core/globoid_worm.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/globoid_worm.py#L51","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/core/globoid_worm.py:170 and src/wormgear/core/virtual_hobbing.py:532","ref":"src/wormgear/core/globoid_worm.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/globoid_worm.py#L170","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/core/globoid_worm.py:372 and src/wormgear/core/globoid_worm.py:693","ref":"src/wormgear/core/globoid_worm.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/globoid_worm.py#L372","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/wormgear/core/globoid_worm.py:1337 and src/wormgear/core/wheel.py:288","ref":"src/wormgear/core/globoid_worm.py","url":"https://github.com/pzfreo/wormgear/blob/b2e287f9717c851eb2f6dc942f045f72201b6c77/src/wormgear/core/globoid_worm.py#L1337","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":51.0,"weighted_findings":59.5,"scanned_lines":20418.0,"category:best-practice":17.0,"category:correctness":18.0,"category:maintainability":16.0},"findings":[{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'f.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'f.name' is used. Use '.flush()' or close the file before using 'f.name'.","path":"src/wormgear/core/geometry_repair.py","line":108,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/core/geometry_repair.py:108"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'f.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'f.name' is used. Use '.flush()' or close the file before using 'f.name'.","path":"src/wormgear/core/geometry_repair.py","line":151,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/core/geometry_repair.py:151"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'f.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'f.name' is used. Use '.flush()' or close the file before using 'f.name'.","path":"src/wormgear/core/worm.py","line":901,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/core/worm.py:901"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'tmp.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp.name' is used. Use '.flush()' or close the file before using 'tmp.name'.","path":"src/wormgear/io/package.py","line":69,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/io/package.py:69"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'tmp.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp.name' is used. Use '.flush()' or close the file before using 'tmp.name'.","path":"src/wormgear/io/package.py","line":85,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/io/package.py:85"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'tmp.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp.name' is used. Use '.flush()' or close the file before using 'tmp.name'.","path":"src/wormgear/io/package.py","line":107,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/io/package.py:107"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'tmp.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp.name' is used. Use '.flush()' or close the file before using 'tmp.name'.","path":"src/wormgear/io/package.py","line":142,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/io/package.py:142"},{"rule_id":"opengrep/python.lang.correctness.tempfile.tempfile-without-flush","severity":"high","message":"Using 'tmp.name' without '.flush()' or '.close()' may cause an error because the file may not exist when 'tmp.name' is used. Use '.flush()' or close the file before using 'tmp.name'.","path":"src/wormgear/io/package.py","line":187,"fingerprint":"python.lang.correctness.tempfile.tempfile-without-flush:src/wormgear/io/package.py:187"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant part.is_valid() because part.is_valid is always true.","path":"scripts/compare_step.py","line":73,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/compare_step.py:73"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/export_sample_gltf.py","line":99,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/export_sample_gltf.py:99"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant solid.is_valid() because solid.is_valid is always true.","path":"scripts/generate_comparison_steps.py","line":61,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:scripts/generate_comparison_steps.py:61"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/generate_schemas.py","line":74,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/generate_schemas.py:74"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/generate_schemas.py","line":95,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/generate_schemas.py:95"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"scripts/generate_schemas.py","line":125,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:scripts/generate_schemas.py:125"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/wormgear/cli/generate.py","line":254,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/wormgear/cli/generate.py:254"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_shaft\" a function or an attribute? If it is a function, you may have meant self.is_shaft() because self.is_shaft is always true.","path":"src/wormgear/core/features.py","line":172,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/features.py:172"},{"rule_id":"opengrep/python.lang.maintainability.useless-if-body","severity":"medium","message":"Useless if statement; both blocks have the same body","path":"src/wormgear/core/features.py","line":549,"fingerprint":"python.lang.maintainability.useless-if-body:src/wormgear/core/features.py:549"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_shaft\" a function or an attribute? If it is a function, you may have meant keyway.is_shaft() because keyway.is_shaft is always true.","path":"src/wormgear/core/features.py","line":549,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/features.py:549"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant part.is_valid() because part.is_valid is always true.","path":"src/wormgear/core/geometry_repair.py","line":47,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/geometry_repair.py:47"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant result.is_valid() because result.is_valid is always true.","path":"src/wormgear/core/geometry_repair.py","line":59,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/geometry_repair.py:59"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant result.is_valid() because result.is_valid is always true.","path":"src/wormgear/core/geometry_repair.py","line":89,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/geometry_repair.py:89"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant result.is_valid() because result.is_valid is always true.","path":"src/wormgear/core/geometry_repair.py","line":99,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/geometry_repair.py:99"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant reimported.is_valid() because reimported.is_valid is always true.","path":"src/wormgear/core/geometry_repair.py","line":114,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/geometry_repair.py:114"},{"rule_id":"opengrep/python.lang.best-practice.logging-error-without-handling","severity":"medium","message":"Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info.","path":"src/wormgear/core/globoid_worm.py","line":513,"fingerprint":"python.lang.best-practice.logging-error-without-handling:src/wormgear/core/globoid_worm.py:513"},{"rule_id":"opengrep/python.lang.best-practice.logging-error-without-handling","severity":"medium","message":"Errors should only be logged when handled. The code logs the error and propogates the exception, consider reducing the level to warning or info.","path":"src/wormgear/core/globoid_worm.py","line":960,"fingerprint":"python.lang.best-practice.logging-error-without-handling:src/wormgear/core/globoid_worm.py:960"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_valid\" a function or an attribute? If it is a function, you may have meant result.is_valid() because result.is_valid is always true.","path":"src/wormgear/core/rim_thickness.py","line":222,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/rim_thickness.py:222"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_shaft\" a function or an attribute? If it is a function, you may have meant self.keyway.is_shaft() because self.keyway.is_shaft is always true.","path":"src/wormgear/core/virtual_hobbing.py","line":218,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/virtual_hobbing.py:218"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_shaft\" a function or an attribute? If it is a function, you may have meant self.keyway.is_shaft() because self.keyway.is_shaft is always true.","path":"src/wormgear/core/wheel.py","line":96,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/wheel.py:96"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_globoid\" a function or an attribute? If it is a function, you may have meant self.is_globoid() because self.is_globoid is always true.","path":"src/wormgear/core/wheel.py","line":110,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/wheel.py:110"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_globoid\" a function or an attribute? If it is a function, you may have meant self.is_globoid() because self.is_globoid is always true.","path":"src/wormgear/core/wheel.py","line":186,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/wheel.py:186"},{"rule_id":"opengrep/python.lang.maintainability.is-function-without-parentheses","severity":"medium","message":"Is \"is_shaft\" a function or an attribute? If it is a function, you may have meant self.keyway.is_shaft() because self.keyway.is_shaft is always true.","path":"src/wormgear/core/worm.py","line":104,"fingerprint":"python.lang.maintainability.is-function-without-parentheses:src/wormgear/core/worm.py:104"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/wormgear/io/loaders.py","line":489,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/wormgear/io/loaders.py:489"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/wormgear/io/loaders.py","line":543,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/wormgear/io/loaders.py:543"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":940,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:940"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":944,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:944"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":956,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:956"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":961,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:961"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":1035,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:1035"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":1172,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:1172"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":1264,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:1264"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"web/app.js","line":1270,"fingerprint":"javascript.lang.best-practice.javascript-alert:web/app.js:1270"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/publish.sh","line":57,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/publish.sh:57"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/publish.sh","line":76,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/publish.sh:76"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":61,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:61"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":61,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:61"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":190,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:190"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":190,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:190"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":233,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:233"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":233,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:233"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":254,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:254"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"web/generator-worker.js","line":254,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:web/generator-worker.js:254"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":1.0,"check:tests_cochange":1.0,"test_lines":12779.0,"source_lines":20418.0,"test_ratio":0.6259,"ci_files":4.0,"cochange_share":0.2722,"cochange_commits":180.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/deploy-web.yml","ref":".github/workflows/deploy-web.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/publish.yml","ref":".github/workflows/publish.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/test-web-build.yml","ref":".github/workflows/test-web-build.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (pytest)","ref":null,"url":null,"weight":0.0},{"kind":"ci","description":"CI runs linters (ruff, mypy, black --check)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["pytest"],"lint_commands":["ruff","mypy","black --check"]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":1.0,"readme_lines":134.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.9846,"check:low_escape_density":1.0,"escapes":42.0,"escapes_per_kloc":2.678},"findings":[],"evidence":[{"kind":"typing","description":"Python strict type checking: pyproject.toml","ref":"pyproject.toml","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":19649.0,"other_lines":769.0,"files_blamed":55.0,"blame_failures":0.0,"quality:ai_findings":43.0,"quality:ai_per_kloc":2.188,"quality:other_findings":8.0,"quality:other_per_kloc":10.403,"quality:ratio":0.21,"security:ai_findings":20.0,"security:ai_per_kloc":1.018,"security:other_findings":0.0,"security:other_per_kloc":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}