FrozenNode/Laravel-Administrator

An administrative interface package for Laravel

https://github.com/FrozenNode/Laravel-Administrator · commit 34d604c2029c · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/FrozenNode/Laravel-Administrator
Commit: 34d604c2029ce2b11f93599baf4ec909501fd356
Generated: 2026-11-13T23:35:40+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	none-detected	65%	100%
Code quality	67	adequate	90%	100%
Security	54	weak	85%	100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%
Stylometry index: 0.12 per 1,000 lines (narrated steps 4, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.

Month	Lines added	Attributed to AI
2015-01	48	0%
2015-02	775	0%
2015-03	39	0%
2015-07	18	0%
2015-08	95	0%
2015-09	32	0%
2015-10	90	0%
2015-11	8	0%
2015-12	33	0%
2016-01	2	0%
2016-03	2	0%
2016-05	7	0%

Evidence

step-by-step narration comment: // finally, fallback on the calculated width of the element (public/js/jq)
step-by-step narration comment: //now we can instantiate the object (src/Frozenno)
step-by-step narration comment: //now we do some final organization to categorize these columns (useful later in the sorting) (src/Frozenno)
step-by-step narration comment: //now we need to limit and offset the rows in remembrance of our dear lost friend paginate() (src/Frozenno)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.13, CI runs tests; 10% of function code in complex or long functions; 7% duplicated lines. Weakest area: process.

Area	Score
Complexity (lizard)	74
Duplication	66
Code smells (Opengrep)	70
Tests and CI	67
Documentation	100
Type safety	n/a
Process (Scorecard review/maintenance)	20

Functions: 6,363; mean complexity 3.4, 90th percentile 7; 154 complex and 7 long functions
Duplicated lines: 7.0% of 23,819 compared
Tests: 4,262 test lines for 33,981 source lines (ratio 0.13); CI test commands: phpunit; 13% of recent source commits also change tests
Docs missing or thin: none

Most complex functions:

Security

Security posture is weak: 54 high-severity SAST findings. Weakest area: posture.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	36
Vulnerable dependencies (OSV)	n/a
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	25

Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles
OpenSSF Scorecard aggregate: 2.6/10 (published 2026-11-09)

Top findings

Severity	Finding	Location
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `a.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `a.$.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:72
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:73
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.$.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:73
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:391
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:656
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `g.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:656
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:877
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `d.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/ckeditor.js:877
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getElement(this.ID.R_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getElement(this.ID.G_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getElement(this.ID.B_HEX).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:198
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getElement(this.ID.CONTROLS_LABEL).innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/uicolor/yui/yui.js:198
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `this.getInputElement().$.children[0].innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56
high	`opengrep/javascript.browser.security.insecure-document-method`: User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65
high	`opengrep/javascript.browser.security.insecure-innerhtml`: User controlled data in a `c.IgnoreAllCapsWords.getElement().$.lastChild.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]	public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 33,981; test lines: 4,262

Language	Lines
JavaScript	21,408
PHP	16,766
Shell	69

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/security.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)