Elyld/Verdant

• Repository: https://github.com/Elyld/Verdant
• Commit: e889ed86bde9094c8d28f6ef2d736423515f5a27
• Generated: 2026-11-14T14:52:00+00:00
• Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence).

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 53.1%

• Estimated AI-generated share: 0.0%

• Stylometry index: 5.46 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 338). Reported as a signal, not scored.

Evidence

• 3,132 lines of first-party code in ~1.7h (1,831 lines/hour, 3 commit session) (67ff9513a57f)
• 4,002 lines of first-party code in ~2.5h (1,613 lines/hour, 5 commit session) (7c5286487348)
• 3,922 lines of first-party code in ~2.7h (1,457 lines/hour, 4 commit session) (ebb33044a0af)
• 1,912 lines of first-party code in ~1.3h (1,421 lines/hour, 2 commit session) (d228c7ef9571)
• 2,348 lines of first-party code in ~1.8h (1,328 lines/hour, 4 commit session) (ed2116437198)
• 2,747 lines of first-party code in ~2.1h (1,299 lines/hour, 7 commit session) (35571455d7a3)
• 1,125 lines of first-party code in ~0.9h (1,243 lines/hour, 2 commit session) (fe4392e78f4a)
• 1,936 lines of first-party code in ~1.8h (1,090 lines/hour, 3 commit session) (73469632470c)
• 2,290 lines of first-party code in ~2.3h (977 lines/hour, 5 commit session) (06953dc8153f)
• 2,174 lines of first-party code in ~2.9h (758 lines/hour, 7 commit session) (a2fbd2ff5fe8)
• 1,286 lines of first-party code in ~2.1h (627 lines/hour, 3 commit session) (aa68a936505d)
• 1,662 lines of first-party code in ~3.1h (528 lines/hour, 4 commit session) (8de0ab9be6df)
• 1,152 lines of first-party code in ~2.2h (520 lines/hour, 2 commit session) (d858497da02b)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.59, CI runs tests; 22% of function code in complex or long functions; 3% duplicated lines. Weakest area: type safety.

• Functions: 2,038; mean complexity 4.1, 90th percentile 9; 79 complex and 10 long functions
• Duplicated lines: 2.5% of 24,590 compared
• Tests: 18,425 test lines for 30,976 source lines (ratio 0.59); CI test commands: pytest; 80% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• build_context in app/ai_context.py: complexity 67, 161 lines
• apply_draft in app/routers/agent.py: complexity 62, 130 lines
• _validate in app/routers/settings.py: complexity 59, 82 lines
• build_write_draft in app/ai_tools.py: complexity 54, 109 lines
• compute_alerts in app/garden_alerts.py: complexity 52, 108 lines

Security

Security posture is poor: 5 known vulnerabilities in 1 dependencies; 268 high-severity SAST findings; 15 high-severity workflow issues. Weakest area: posture.

• Known vulnerabilities: 5 in 1 packages (critical 0, high 2, medium 3, low 0)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

• binary-release-asset: release v2.65.1 ships Verdant-2.65.1-x64.msi (0 downloads)
• binary-release-asset: release v2.65.0 ships Verdant-2.65.0-x64.msi (0 downloads)
• binary-release-asset: release v2.64.1 ships Verdant-2.64.1-x64.msi (0 downloads)
• binary-release-asset: release v2.64.0 ships Verdant-2.64.0-x64.msi (0 downloads)
• binary-release-asset: release v2.63.0 ships Verdant-2.63.0-x64.msi (0 downloads)
• readme-download-lure: gives an archive password

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

• Source lines: 30,976; test lines: 18,425