{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:41:26.431740Z","repo":{"ref":{"host":"github.com","owner":"steveLauwh","name":"SGI-STL"},"default_branch":"master","clone_url":"https://github.com/steveLauwh/SGI-STL.git","html_url":"https://github.com/steveLauwh/SGI-STL","description":"剖析 STL 是一种享受的过程！","stars":2520,"forks":729,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":1434,"primary_language":"C++","license_spdx":null,"created_at":"2017-07-19T09:29:36Z","pushed_at":"2018-01-15T16:49:57Z","security_policy_url":null,"distribution":{"owner_created_at":"2014-03-21T03:27:38Z","owner_type":"User","release_assets":[]}},"commit_sha":"be34aace923769ee114366e0e7decf8521d422b9","profile":{"lines_by_language":{"C":48555,"C++":1118},"files_by_category":{"source":139,"other":39,"docs":31,"binary":17,"config":1},"source_lines":49673,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":44.6,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":94.1,"duplication":0.9,"lint":100.0,"testing":0.0,"docs":40.0,"type_safety":null,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 2% of function code in complex or long functions; 78% duplicated lines. Weakest area: testing."},"security":{"score":85.3,"confidence":0.85,"coverage":1.0,"label":"strong","breakdown":{"secrets":100.0,"sast":99.5,"dependencies":null,"ci_actions":null,"posture":20.0,"scorecard":null},"summary":"Security posture is strong: no high-impact findings. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no registry dependencies declared"},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":304.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":50764.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2017-07":{"loc":31425,"attributed_loc":0},"2017-08":{"loc":16300,"attributed_loc":0},"2017-12":{"loc":715,"attributed_loc":0},"2018-01":{"loc":2324,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":68.0,"flagged_units":0.0,"pre_ai_era_bursts":3.0,"pre_ai_era_measured_loc":23369.0,"pre_ai_era_burst_loc":12804.0,"measured_loc":23369.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":1270.5,"median_loc_per_hour":162.19442865264355,"pr_timed_units":0.0,"excluded_import_loc":27395.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["a0300a23e1d091d25f689f798ea91325cc8f3de6"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":49673.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":3.0,"findings_high":0.0,"findings_medium":3.0,"findings_low":0.0,"weighted_findings":0.75,"scanned_lines":49673.0,"parse_errors":73.0},"findings":[{"rule_id":"opengrep/c.lang.security.insecure-use-memset","severity":"medium","message":"When handling sensitive information in a buffer, it's important to ensure  that the data is securely erased before the buffer is deleted or reused.  While `memset()` is commonly used for this purpose, it can leave sensitive  information behind due to compiler optimizations or other factors.  To avoi [confidence low]","path":"SGI-STL V3.3/stl_algobase.h","line":461,"fingerprint":"c.lang.security.insecure-use-memset:SGI-STL V3.3/stl_algobase.h:461"},{"rule_id":"opengrep/c.lang.security.insecure-use-memset","severity":"medium","message":"When handling sensitive information in a buffer, it's important to ensure  that the data is securely erased before the buffer is deleted or reused.  While `memset()` is commonly used for this purpose, it can leave sensitive  information behind due to compiler optimizations or other factors.  To avoi [confidence low]","path":"SGI-STL V3.3/stl_algobase.h","line":467,"fingerprint":"c.lang.security.insecure-use-memset:SGI-STL V3.3/stl_algobase.h:467"},{"rule_id":"opengrep/c.lang.security.insecure-use-memset","severity":"medium","message":"When handling sensitive information in a buffer, it's important to ensure  that the data is securely erased before the buffer is deleted or reused.  While `memset()` is commonly used for this purpose, it can leave sensitive  information behind due to compiler optimizations or other factors.  To avoi [confidence low]","path":"SGI-STL V3.3/stl_algobase.h","line":472,"fingerprint":"c.lang.security.insecure-use-memset:SGI-STL V3.3/stl_algobase.h:472"}],"evidence":[],"data":{"rulesets":["c"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":1.0,"signed_commit_share":0.71,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":4359.0,"function_nloc":24251.0,"mean_ccn":1.56,"p90_ccn":3.0,"complex_functions":7.0,"long_functions":2.0,"many_param_functions":2.0,"risky_nloc_share":0.0204},"findings":[],"evidence":[{"kind":"complex-function","description":"_Rb_tree_rebalance_for_erase in SGI-STL V3.3/stl_tree.h: complexity 40, 127 lines","ref":"SGI-STL V3.3/stl_tree.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/stl_tree.h#L300","weight":0.6666666666666666},{"kind":"complex-function","description":"_Rb_tree_rebalance_for_erase in The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h: complexity 40, 127 lines","ref":"The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h#L311","weight":0.6666666666666666},{"kind":"complex-function","description":"_Rb_tree<_Key,_Value,_KeyOfValue,_Compare,_Alloc>::__rb_verify in SGI-STL V3.3/stl_tree.h: complexity 21, 27 lines","ref":"SGI-STL V3.3/stl_tree.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/stl_tree.h#L1305","weight":0.35},{"kind":"complex-function","description":"_Rb_tree<_Key,_Value,_KeyOfValue,_Compare,_Alloc>::__rb_verify in The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h: complexity 21, 27 lines","ref":"The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/The Annotated STL Sources V3.3/container/associative container/RB-tree/stl_tree.h#L1328","weight":0.35},{"kind":"complex-function","description":"rope<_CharT,_Alloc>::_S_substring in SGI-STL V3.3/ropeimpl.h: complexity 17, 98 lines","ref":"SGI-STL V3.3/ropeimpl.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/ropeimpl.h#L645","weight":0.2833333333333333},{"kind":"complex-function","description":"search in SGI-STL V3.3/stl_algo.h: complexity 16, 44 lines","ref":"SGI-STL V3.3/stl_algo.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/stl_algo.h#L365","weight":0.26666666666666666},{"kind":"complex-function","description":"search in The Annotated STL Sources V3.3/algorithm/stl_algo.h: complexity 16, 44 lines","ref":"The Annotated STL Sources V3.3/algorithm/stl_algo.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/The Annotated STL Sources V3.3/algorithm/stl_algo.h#L365","weight":0.26666666666666666}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":36056.0,"duplicated_lines":28269.0,"duplicated_share":0.784,"files":139.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL Test/allocator_test/myAllocator/myAllocator.h:53 and SGI-STL V3.3/defalloc.h:57","ref":"SGI-STL Test/allocator_test/myAllocator/myAllocator.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL Test/allocator_test/myAllocator/myAllocator.h#L53","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/algo.h:3 and SGI-STL V3.3/algobase.h:3","ref":"SGI-STL V3.3/algo.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/algo.h#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/algo.h:20 and The Annotated STL Sources V3.3/algorithm/algo.h:20","ref":"SGI-STL V3.3/algo.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/algo.h#L20","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/algobase.h:19 and The Annotated STL Sources V3.3/algorithm/algobase.h:19","ref":"SGI-STL V3.3/algobase.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/algobase.h#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/alloc.h:2 and SGI-STL V3.3/pthread_alloc.h:2","ref":"SGI-STL V3.3/alloc.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/alloc.h#L2","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/alloc.h:7 and The Annotated STL Sources V3.3/allocator/alloc.h:7","ref":"SGI-STL V3.3/alloc.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/alloc.h#L7","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/bvector.h:8 and SGI-STL V3.3/iterator.h:8","ref":"SGI-STL V3.3/bvector.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/bvector.h#L8","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/bvector.h:15 and SGI-STL V3.3/hash_map.h:2","ref":"SGI-STL V3.3/bvector.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/bvector.h#L15","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/bvector.h:20 and The Annotated STL Sources V3.3/container/sequence container/vector/bvector.h:20","ref":"SGI-STL V3.3/bvector.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/bvector.h#L20","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: SGI-STL V3.3/char_traits.h:2 and SGI-STL V3.3/deque.h:15","ref":"SGI-STL V3.3/char_traits.h","url":"https://github.com/steveLauwh/SGI-STL/blob/be34aace923769ee114366e0e7decf8521d422b9/SGI-STL V3.3/char_traits.h#L2","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"weighted_findings":0.0,"scanned_lines":49673.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":49673.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":109.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":18.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}