RepoTrust

Leaderboard github.com

DeathKing/Learning-SICP

MIT视频公开课《计算机程序的构造和解释》中文化项目及课程学习资料搜集。

  • View repository ↗
  • Ruby
  • ★ 11,298
  • commit b60b706157a8
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

64/100

weak

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

64/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON RepoTrust ai badgeRepoTrust quality badgeRepoTrust security badge

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

  1. 2012-110 · 0% AI
  2. 2012-120 · 0% AI
  3. 2013-010 · 0% AI
  4. 2013-02110 · 0% AI
  5. 2013-032 · 0% AI
  6. 2013-040 · 0% AI
  7. 2013-050 · 0% AI
  8. 2013-093 · 0% AI
  9. 2013-100 · 0% AI
  10. 2014-0122 · 0% AI
  11. 2014-020 · 0% AI
  12. 2014-033 · 0% AI
  13. 2014-040 · 0% AI
  14. 2014-050 · 0% AI
  15. 2014-060 · 0% AI
  16. 2014-070 · 0% AI
  17. 2014-080 · 0% AI
  18. 2014-090 · 0% AI
  19. 2014-1043 · 0% AI
  20. 2014-110 · 0% AI
  21. 2014-120 · 0% AI
  22. 2015-010 · 0% AI
  23. 2015-021 · 0% AI
  24. 2015-0588 · 0% AI
  25. 2015-0830 · 0% AI
  26. 2015-100 · 0% AI
  27. 2015-110 · 0% AI
  28. 2015-1272 · 0% AI
  29. 2016-010 · 0% AI
  30. 2016-021 · 0% AI
  31. 2016-040 · 0% AI
  32. 2016-050 · 0% AI
  33. 2016-072 · 0% AI
  34. 2016-080 · 0% AI
  35. 2016-092 · 0% AI
  36. 2017-011 · 0% AI
  37. 2017-020 · 0% AI
  38. 2017-030 · 0% AI
  39. 2017-042 · 0% AI
  40. 2017-050 · 0% AI
  41. 2017-0617 · 0% AI
  42. 2017-071 · 0% AI
  43. 2017-080 · 0% AI
  44. 2017-090 · 0% AI
  45. 2017-100 · 0% AI
  46. 2017-120 · 0% AI
  47. 2018-030 · 0% AI
  48. 2018-040 · 0% AI
  49. 2018-050 · 0% AI
  50. 2018-060 · 0% AI
  51. 2018-072 · 0% AI
  52. 2018-0822 · 0% AI
  53. 2018-100 · 0% AI
  54. 2018-120 · 0% AI
  55. 2019-020 · 0% AI
  56. 2019-070 · 0% AI
  57. 2019-090 · 0% AI
  58. 2019-100 · 0% AI
  59. 2020-020 · 0% AI
  60. 2022-020 · 0% AI
  61. 2023-090 · 0% AI
  62. 2026-060 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
769
effective_loc
424
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
18
measured_loc
424
median_loc_per_hour
0
pr_timed_units
0
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
424
work_units
25
Release velocityskipped
Coding styleok
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
0
files:placeholder
0
index
0
lines_scanned
347
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

64 weak

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity100
  • Duplication100
  • Lint and smells100
  • Tests and CI0
  • Documentation40
  • Type safetynot measured
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok
complex_functions
0
function_nloc
61
functions
13
long_functions
0
many_param_functions
0
mean_ccn
1.38
p90_ccn
3
risky_nloc_share
0.0%
Duplication (jscpd)ok
compared_lines
245
duplicated_lines
0
duplicated_share
0.0%
files
9
Lintok
findings
0
scanned_lines
347
weighted_findings
0
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
0
cochange_commits
2
cochange_share
0.0%
source_lines
347
test_lines
0
test_ratio
0
Documentationok1 item
  • README.md README.md
check:changelog
no
check:contributing
no
check:license
no
check:readme
yes
readme_lines
70
Type safetyskipped

Security

64 weak

Security posture is weak: no high-impact findings. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)50
  • Vulnerable dependenciesnot measured
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesskipped

no registry dependencies declared

Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
8
findings_high
0
findings_low
0
findings_medium
8
parse_errors
0
scanned_lines
347
weighted_findings
2
Dependencies (osv-scanner)skipped
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
9.5%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

8 medium

SeverityRuleLocationMessageTool
medium opengrep/ruby.lang.security.dangerous-open Tools/merge.rb:40 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/merge.rb:45 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/merge.rb:65 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/separate.rb:20 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/separate.rb:49 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/separate.rb:50 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/timeline.rb:20 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)
medium opengrep/ruby.lang.security.dangerous-open Tools/timeline.rb:32 Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code.... Static analysis (opengrep)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-50
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4140
Tests and CICode qualityok—0
Type safetyCode qualityskipped—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityskipped—0
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityskipped—0no registry dependencies declared
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4148
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-14b60b706157a8prov-5+qual-2+sec-20%6464

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/DeathKing/Learning-SICP/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/DeathKing/Learning-SICP/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/DeathKing/Learning-SICP/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/DeathKing/Learning-SICP/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/DeathKing/Learning-SICP/security.svg)](https://repotrust.synapticcyber.com/r/github.com/DeathKing/Learning-SICP/)
Full text report

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 64 weak 90% 100%
Security 64 weak 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 0.0%
Month Lines added Attributed to AI
2015-05 88 0%
2015-08 30 0%
2015-12 72 0%
2016-02 1 0%
2016-07 2 0%
2016-09 2 0%
2017-01 1 0%
2017-04 2 0%
2017-06 17 0%
2017-07 1 0%
2018-07 2 0%
2018-08 22 0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 100
Duplication 100
Code smells (Opengrep) 100
Tests and CI 0
Documentation 40
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 13; mean complexity 1.4, 90th percentile 3; 0 complex and 0 long functions
  • Duplicated lines: 0.0% of 245 compared
  • Tests: 0 test lines for 347 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: license, contributing, changelog

Security

Security posture is weak: no high-impact findings. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 50
Vulnerable dependencies (OSV) n/a
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a
  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/merge.rb:40
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/merge.rb:45
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/merge.rb:65
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/separate.rb:20
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/separate.rb:49
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/separate.rb:50
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/timeline.rb:20
medium opengrep/ruby.lang.security.dangerous-open: Detected non-static command inside 'open'. Audit the input to 'open'. If unverified user data can reach this call site, this is a code injection vulnerability. A malicious actor can inject a malicious script to execute arbitrary code. [confidence low] Tools/timeline.rb:32

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 347; test lines: 0
Language Lines
Ruby 325
Shell 22