ChrisKnott/Algojammer

An experimental code editor for writing algorithms

https://github.com/ChrisKnott/Algojammer · commit 7591f76064d5 · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/ChrisKnott/Algojammer
Commit: 7591f76064d574989fd8b6de1b48f05713bcb0f4
Generated: 2026-11-13T23:42:53+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	none-detected	43%	100%
Code quality	46	poor	90%	100%
Security	54	weak	85%	100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%

Month	Lines added	Attributed to AI
2018-10	14,940	0%
2018-12	2	0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 5% of function code in complex or long functions; 5% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	87
Duplication	72
Code smells (Opengrep)	28
Tests and CI	0
Documentation	65
Type safety	40
Process (Scorecard review/maintenance)	n/a

Functions: 14,259; mean complexity 3.1, 90th percentile 7; 279 complex and 2 long functions
Duplicated lines: 5.3% of 10,263 compared
Tests: 0 test lines for 14,939 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
Docs missing or thin: contributing, changelog

Most complex functions:

Security

Security posture is weak: 28 high-severity SAST findings. Weakest area: sast.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	12
Vulnerable dependencies (OSV)	n/a
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	20
OpenSSF Scorecard	n/a

Posture checks passed: signed commits, lockfiles; missing: security policy, dependency updates

Top findings

Severity	Finding	Location
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getElement().innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.element.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `l.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.element.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.$measureNode.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.$main.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `e.el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `p.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ace.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-keybinding_menu.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `s.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-keybinding_menu.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-searchbox.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `i.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-searchbox.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-static_highlight.js:1
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `e.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-static_highlight.js:1
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	web/lib/ace/ext-textarea.js:1

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 14,939; test lines: 0

Language	Lines
C	10,114
JavaScript	3,747
Python	563
C++	515

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/ChrisKnott/Algojammer/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/ChrisKnott/Algojammer/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/ChrisKnott/Algojammer/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/ChrisKnott/Algojammer/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/ChrisKnott/Algojammer/security.svg)](https://repotrust.synapticcyber.com/r/github.com/ChrisKnott/Algojammer/)