AurynRobotics/qt-widgeteer
Remote control your Qt applications
- Repository: https://github.com/AurynRobotics/qt-widgeteer
- Commit:
68646d4e03c348bb6b63e0798ac5996a7cf7f8ef - Generated: 2026-11-13T23:58:31+00:00
- Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 93 | explicit | 80% | 100% |
| Code quality | 77 | adequate | 90% | 100% |
| Security | 66 | weak | 85% | 100% |
AI provenance
Explicit AI attribution on 93% of first-party code added; an estimated 93% including velocity signals.
- Explicitly attributed share (lower bound): 93.3%
- Unattributed share in AI-consistent velocity bursts: 0.0%
- Estimated AI-generated share: 93.3%
| AI tool | Attributed commits | Lines added |
|---|---|---|
| Claude Code | 30 | 17,769 |
- AI tooling configured in repo: claude-code
Current source lines last changed by AI-attributed commits: 6,788 of 7,563.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Quality | 0.0 | 0.0 | n/a |
| Security | 0.0 | 0.0 | n/a |
- Stylometry index: 1.06 per 1,000 lines (narrated steps 8, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2026-01 | 17,707 | 100% |
| 2026-02 | 1,335 | 5% |
Evidence
- Claude Code: trailer 'Co-Authored-By: Claude' (4e2ebb0c91b5)
- Claude Code: trailer 'Co-Authored-By: Claude' (45ad7a32d005)
- Claude Code: trailer 'Co-Authored-By: Claude' (7d7cdfdee73d)
- Claude Code: trailer 'Co-Authored-By: Claude' (8f430ed7f7e2)
- Claude Code: trailer 'Co-Authored-By: Claude' (a9979a955b5b)
- Claude Code: trailer 'Co-Authored-By: Claude' (772ee167e0f4)
- Claude Code: trailer 'Co-Authored-By: Claude' (cf5d61d52e69)
- Claude Code: trailer 'Co-Authored-By: Claude' (406c0ce503a9)
- Claude Code: trailer 'Co-Authored-By: Claude' (71f2b8f2e709)
- Claude Code: trailer 'Co-Authored-By: Claude' (452bd140b375)
- Claude Code: trailer 'Co-Authored-By: Claude' (b39a29a3f4b3)
- Claude Code: trailer 'Co-Authored-By: Claude' (36337b5fae17)
- Claude Code: trailer 'Co-Authored-By: Claude' (ae2820971bba)
- Claude Code: trailer 'Co-Authored-By: Claude' (5579fc2bfe8a)
- Claude Code: trailer 'Co-Authored-By: Claude' (bd353bb8c072)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is adequate: test-to-source ratio 1.14, CI runs tests; 29% of function code in complex or long functions; 6% duplicated lines. Weakest area: complexity.
| Area | Score |
|---|---|
| Complexity (lizard) | 42 |
| Duplication | 69 |
| Code smells (Opengrep) | 100 |
| Tests and CI | 100 |
| Documentation | 65 |
| Type safety | n/a |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 261; mean complexity 4.4, 90th percentile 9; 13 complex and 5 long functions
- Duplicated lines: 6.3% of 5,024 compared
- Tests: 8,612 test lines for 7,563 source lines (ratio 1.14); CI test commands: ctest, unittest; 53% of recent source commits also change tests
- Docs missing or thin: contributing, changelog
Most complex functions:
- widgeteer::CommandExecutor::cmdGetFormFields in src/CommandExecutor.cpp: complexity 79, 228 lines
- widgeteer::CommandExecutor::cmdSetValue in src/CommandExecutor.cpp: complexity 44, 182 lines
- widgeteer::CommandExecutor::cmdScreenshot in src/CommandExecutor.cpp: complexity 39, 164 lines
- widgeteer::ElementFinder::byDialogRole in src/ElementFinder.cpp: complexity 33, 60 lines
- widgeteer::CommandExecutor::cmdAssert in src/CommandExecutor.cpp: complexity 32, 71 lines
Security
Security posture is weak: 13 high-severity workflow issues. Weakest area: posture.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 100 |
| Static analysis (Opengrep) | 100 |
| Vulnerable dependencies (OSV) | n/a |
| CI workflows (zizmor) | 6 |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
- Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:16 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:19 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:46 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:59 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:62 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:119 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:135 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:138 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:147 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:158 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:193 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:196 |
| high | zizmor/unpinned-uses: unpinned action reference [confidence high] |
.github/workflows/ci.yml:201 |
| medium | zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] |
.github/workflows/ci.yml:15 |
| medium | zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] |
.github/workflows/ci.yml:58 |
| medium | zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] |
.github/workflows/ci.yml:134 |
| medium | zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] |
.github/workflows/ci.yml:192 |
| medium | zizmor/excessive-permissions: overly broad permissions [confidence medium] |
.github/workflows/ci.yml:1 |
| medium | zizmor/excessive-permissions: overly broad permissions [confidence medium] |
.github/workflows/ci.yml:10 |
| medium | zizmor/excessive-permissions: overly broad permissions [confidence medium] |
.github/workflows/ci.yml:53 |
| medium | zizmor/excessive-permissions: overly broad permissions [confidence medium] |
.github/workflows/ci.yml:128 |
| medium | zizmor/excessive-permissions: overly broad permissions [confidence medium] |
.github/workflows/ci.yml:187 |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Repository profile
- Source lines: 7,563; test lines: 8,612
| Language | Lines |
|---|---|
| C++ | 13,049 |
| Python | 1,625 |
| C | 1,372 |
| Shell | 129 |