RepoTrust

Leaderboard github.com

benawad/graphql-ts-server-boilerplate

A GraphQL server boilerplate made with Typescript, PostgreSQL, and Redis

  • View repository ↗
  • TypeScript
  • ★ 696
  • commit ea96c26a257d
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
50%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

67/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

48/100

poor

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON RepoTrust ai badgeRepoTrust quality badgeRepoTrust security badge

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

  1. 2018-04245 · 0% AI
  2. 2018-051,520 · 0% AI
  3. 2018-0672 · 0% AI
  4. 2018-080 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
39
effective_loc
1,837
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
94.35
measured_loc
1,837
median_loc_per_hour
33.12
pr_timed_units
0
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
1,837
work_units
28
Release velocityskipped
Coding styleok
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
0
files:placeholder
0
index
0
lines_scanned
796
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

67 adequate

Code quality is adequate: test-to-source ratio 0.52, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: type safety.

How the score is built

  • Complexity100
  • Duplication100
  • Lint and smells50
  • Tests and CI55
  • Documentation40
  • Type safety0
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok
complex_functions
0
function_nloc
403
functions
36
long_functions
0
many_param_functions
0
mean_ccn
1.56
p90_ccn
3
risky_nloc_share
0.0%
Duplication (jscpd)ok
compared_lines
465
duplicated_lines
0
duplicated_share
0.0%
files
34
Lintok
category:best-practice
1
category:correctness
7
findings
8
scanned_lines
796
weighted_findings
2.75
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
yes
check:test_ratio
yes
check:tests_cochange
yes
ci_files
0
cochange_commits
31
cochange_share
67.7%
source_lines
796
test_lines
411
test_ratio
0.52
Documentationok1 item
  • README.md README.md
check:changelog
no
check:contributing
no
check:license
no
check:readme
yes
readme_lines
36
Type safetyok
check:low_escape_density
no
check:strict_config
no
escapes
20
escapes_per_kloc
20

Security

48 poor

Security posture is poor: 211 known vulnerabilities in 87 dependencies. Weakest area: dependencies.

How the score is built

  • Secrets100
  • Static analysis (SAST)54
  • Vulnerable dependencies0
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
50
declared
50
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
4
findings_high
0
findings_low
0
findings_medium
4
parse_errors
0
scanned_lines
796
weighted_findings
1.75
Dependencies (osv-scanner)ok
penalty
678
vulnerabilities
211
vulnerable_packages
87
vulns_critical
25
vulns_high
96
vulns_low
11
vulns_medium
66
vulns_unknown
13
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
23.1%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

25 critical96 high84 medium18 low

SeverityRuleLocationMessageTool
critical osv/GHSA-23hp-3jrh-7fpw yarn.lock [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw Dependencies (osv-scanner)
critical osv/GHSA-29xr-v42j-r956 yarn.lock [email protected] (npm) is affected by GHSA-29xr-v42j-r956 Dependencies (osv-scanner)
critical osv/GHSA-2w6w-674q-4c4q yarn.lock [email protected] (npm) is affected by GHSA-2w6w-674q-4c4q Dependencies (osv-scanner)
critical osv/GHSA-4g88-fppr-53pp yarn.lock [email protected] (npm) is affected by GHSA-4g88-fppr-53pp Dependencies (osv-scanner)
critical osv/GHSA-4g88-fppr-53pp yarn.lock [email protected] (npm) is affected by GHSA-4g88-fppr-53pp Dependencies (osv-scanner)
critical osv/GHSA-67hx-6x53-jw92 yarn.lock [email protected] (npm) is affected by GHSA-67hx-6x53-jw92 Dependencies (osv-scanner)
critical osv/GHSA-6fw4-hr69-g3rv yarn.lock [email protected] (npm) is affected by GHSA-6fw4-hr69-g3rv Dependencies (osv-scanner)
critical osv/GHSA-765h-qjxv-5f44 yarn.lock [email protected] (npm) is affected by GHSA-765h-qjxv-5f44 Dependencies (osv-scanner)
critical osv/GHSA-896r-f27r-55mw yarn.lock [email protected] (npm) is affected by GHSA-896r-f27r-55mw Dependencies (osv-scanner)
critical osv/GHSA-8r5x-fm3f-whwj yarn.lock [email protected] (npm) is affected by GHSA-8r5x-fm3f-whwj Dependencies (osv-scanner)
critical osv/GHSA-8r6j-v8pm-fqw3 yarn.lock [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 Dependencies (osv-scanner)
critical osv/GHSA-934x-72xh-5hrg yarn.lock [email protected] (npm) is affected by GHSA-934x-72xh-5hrg Dependencies (osv-scanner)
critical osv/GHSA-f2jv-r9rf-7988 yarn.lock [email protected] (npm) is affected by GHSA-f2jv-r9rf-7988 Dependencies (osv-scanner)
critical osv/GHSA-fhjf-83wg-r2j9 yarn.lock [email protected] (npm) is affected by GHSA-fhjf-83wg-r2j9 Dependencies (osv-scanner)
critical osv/GHSA-fjxv-7rqg-78g4 yarn.lock [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 Dependencies (osv-scanner)
critical osv/GHSA-fx4w-v43j-vc45 yarn.lock [email protected] (npm) is affected by GHSA-fx4w-v43j-vc45 Dependencies (osv-scanner)
critical osv/GHSA-jf85-cpcp-j695 yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-jqcg-44mw-7w3h yarn.lock [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h Dependencies (osv-scanner)
critical osv/GHSA-p8wg-vrv2-v86f yarn.lock [email protected] (npm) is affected by GHSA-p8wg-vrv2-v86f Dependencies (osv-scanner)
critical osv/GHSA-pf2j-9qmp-jqr2 yarn.lock [email protected] (npm) is affected by GHSA-pf2j-9qmp-jqr2 Dependencies (osv-scanner)
critical osv/GHSA-w457-6q6x-cgp9 yarn.lock [email protected] (npm) is affected by GHSA-w457-6q6x-cgp9 Dependencies (osv-scanner)
critical osv/GHSA-w7jw-789q-3m8p yarn.lock [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
high osv/GHSA-23c5-xmqv-rm74 yarn.lock [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 Dependencies (osv-scanner)
high osv/GHSA-27r3-jxmh-p828 yarn.lock [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 Dependencies (osv-scanner)
high osv/GHSA-27r3-jxmh-p828 yarn.lock [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 Dependencies (osv-scanner)
high osv/GHSA-2883-xcg3-v3hh yarn.lock [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh Dependencies (osv-scanner)
high osv/GHSA-2cf5-4w76-r9qv yarn.lock [email protected] (npm) is affected by GHSA-2cf5-4w76-r9qv Dependencies (osv-scanner)
high osv/GHSA-34x7-hfp2-rc4v yarn.lock [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-35q2-47q7-3pc3 yarn.lock [email protected] (npm) is affected by GHSA-35q2-47q7-3pc3 Dependencies (osv-scanner)
high osv/GHSA-37ch-88jc-xwx2 yarn.lock [email protected] (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j Dependencies (osv-scanner)
high osv/GHSA-395f-4hp3-45gv yarn.lock [email protected] (npm) is affected by GHSA-395f-4hp3-45gv Dependencies (osv-scanner)
high osv/GHSA-3cqr-58rm-57f8 yarn.lock [email protected] (npm) is affected by GHSA-3cqr-58rm-57f8 Dependencies (osv-scanner)
high osv/GHSA-3h5v-q93c-6h6q yarn.lock [email protected] (npm) is affected by GHSA-3h5v-q93c-6h6q Dependencies (osv-scanner)
high osv/GHSA-3h5v-q93c-6h6q yarn.lock [email protected] (npm) is affected by GHSA-3h5v-q93c-6h6q Dependencies (osv-scanner)
high osv/GHSA-3jfq-g458-7qm9 yarn.lock [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 Dependencies (osv-scanner)
high osv/GHSA-3jxr-9vmj-r5cp yarn.lock [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp Dependencies (osv-scanner)
high osv/GHSA-3mfm-83xf-c92r yarn.lock [email protected] (npm) is affected by GHSA-3mfm-83xf-c92r Dependencies (osv-scanner)
high osv/GHSA-3ppc-4f35-3m26 yarn.lock [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 Dependencies (osv-scanner)
high osv/GHSA-3xgq-45jj-v275 yarn.lock [email protected] (npm) is affected by GHSA-3xgq-45jj-v275 Dependencies (osv-scanner)
high osv/GHSA-42xw-2xvc-qx8m yarn.lock [email protected] (npm) is affected by GHSA-42xw-2xvc-qx8m Dependencies (osv-scanner)
high osv/GHSA-43fc-jf86-j433 yarn.lock [email protected] (npm) is affected by GHSA-43fc-jf86-j433 Dependencies (osv-scanner)
high osv/GHSA-4852-vrh7-28rf yarn.lock [email protected] (npm) is affected by GHSA-4852-vrh7-28rf Dependencies (osv-scanner)
high osv/GHSA-4jqc-8m5r-9rpr yarn.lock [email protected] (npm) is affected by GHSA-4jqc-8m5r-9rpr Dependencies (osv-scanner)
high osv/GHSA-4jqc-8m5r-9rpr yarn.lock [email protected] (npm) is affected by GHSA-4jqc-8m5r-9rpr Dependencies (osv-scanner)
high osv/GHSA-52cp-r559-cp3m yarn.lock [email protected] (npm) is affected by GHSA-52cp-r559-cp3m Dependencies (osv-scanner)
high osv/GHSA-5955-9wpr-37jh yarn.lock [email protected] (npm) is affected by GHSA-5955-9wpr-37jh Dependencies (osv-scanner)
high osv/GHSA-5p4m-2wfm-xmqj yarn.lock [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj Dependencies (osv-scanner)
high osv/GHSA-62ch-8vmq-8xm7 yarn.lock [email protected] (npm) is affected by GHSA-62ch-8vmq-8xm7 Dependencies (osv-scanner)
high osv/GHSA-62gr-4qp9-h98f yarn.lock [email protected] (npm) is affected by GHSA-62gr-4qp9-h98f Dependencies (osv-scanner)
high osv/GHSA-62hf-57xw-28j9 yarn.lock [email protected] (npm) is affected by GHSA-62hf-57xw-28j9 Dependencies (osv-scanner)
high osv/GHSA-6c8f-qphg-qjgp yarn.lock [email protected] (npm) is affected by GHSA-6c8f-qphg-qjgp Dependencies (osv-scanner)
high osv/GHSA-6chq-wfr3-2hj9 yarn.lock [email protected] (npm) is affected by GHSA-6chq-wfr3-2hj9 Dependencies (osv-scanner)
high osv/GHSA-6chw-6frg-f759 yarn.lock [email protected] (npm) is affected by GHSA-6chw-6frg-f759 Dependencies (osv-scanner)
high osv/GHSA-6j4f-fj2g-mc7p yarn.lock [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p Dependencies (osv-scanner)
high osv/GHSA-74fj-2j2h-c42q yarn.lock [email protected] (npm) is affected by GHSA-74fj-2j2h-c42q Dependencies (osv-scanner)
high osv/GHSA-7r86-cg39-jmmj yarn.lock [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj Dependencies (osv-scanner)
high osv/GHSA-7wpw-2hjm-89gp yarn.lock [email protected] (npm) is affected by GHSA-7wpw-2hjm-89gp Dependencies (osv-scanner)
high osv/GHSA-83g3-92jg-28cx yarn.lock [email protected] (npm) is affected by GHSA-83g3-92jg-28cx Dependencies (osv-scanner)
high osv/GHSA-8qq5-rm4j-mr97 yarn.lock [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 Dependencies (osv-scanner)
high osv/GHSA-8v63-cqqc-6r2c yarn.lock [email protected] (npm) is affected by GHSA-8v63-cqqc-6r2c Dependencies (osv-scanner)
high osv/GHSA-8x88-c5mf-7j5w yarn.lock [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w Dependencies (osv-scanner)
high osv/GHSA-93q8-gq69-wqmw yarn.lock [email protected] (npm) is affected by GHSA-93q8-gq69-wqmw Dependencies (osv-scanner)
high osv/GHSA-96hv-2xvq-fx4p yarn.lock [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p Dependencies (osv-scanner)
high osv/GHSA-96hv-2xvq-fx4p yarn.lock [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p Dependencies (osv-scanner)
high osv/GHSA-9c47-m6qq-7p4h yarn.lock [email protected] (npm) is affected by GHSA-9c47-m6qq-7p4h Dependencies (osv-scanner)
high osv/GHSA-9cx6-37pm-9jff yarn.lock [email protected] (npm) is affected by GHSA-9cx6-37pm-9jff Dependencies (osv-scanner)
high osv/GHSA-9ppj-qmqm-q256 yarn.lock [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 Dependencies (osv-scanner)
high osv/GHSA-9r2w-394v-53qc yarn.lock [email protected] (npm) is affected by GHSA-9r2w-394v-53qc Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c4w7-xm78-47vh yarn.lock [email protected] (npm) is affected by GHSA-c4w7-xm78-47vh Dependencies (osv-scanner)
high osv/GHSA-cph5-m8f7-6c5x yarn.lock [email protected] (npm) is affected by GHSA-cph5-m8f7-6c5x Dependencies (osv-scanner)
high osv/GHSA-cwx2-736x-mf6w yarn.lock [email protected] (npm) is affected by GHSA-cwx2-736x-mf6w Dependencies (osv-scanner)
high osv/GHSA-f8q6-p94x-37v3 yarn.lock [email protected] (npm) is affected by GHSA-f8q6-p94x-37v3 Dependencies (osv-scanner)
high osv/GHSA-f9cm-qmx5-m98h yarn.lock [email protected] (npm) is affected by GHSA-f9cm-qmx5-m98h Dependencies (osv-scanner)
high osv/GHSA-ff7x-qrg7-qggm yarn.lock [email protected] (npm) is affected by GHSA-ff7x-qrg7-qggm Dependencies (osv-scanner)
high osv/GHSA-fwr7-v2mv-hh25 yarn.lock [email protected] (npm) is affected by GHSA-fwr7-v2mv-hh25 Dependencies (osv-scanner)
high osv/GHSA-grv7-fg5c-xmjg yarn.lock [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg Dependencies (osv-scanner)
high osv/GHSA-grv7-fg5c-xmjg yarn.lock [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg Dependencies (osv-scanner)
high osv/GHSA-hfxv-24rg-xrqf yarn.lock [email protected] (npm) is affected by GHSA-hfxv-24rg-xrqf Dependencies (osv-scanner)
high osv/GHSA-hmw2-7cc7-3qxx yarn.lock [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx Dependencies (osv-scanner)
high osv/GHSA-hrpp-h998-j3pp yarn.lock [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp Dependencies (osv-scanner)
high osv/GHSA-hrpp-h998-j3pp yarn.lock [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp Dependencies (osv-scanner)
high osv/GHSA-j5f8-grm9-p9fc yarn.lock [email protected] (npm) is affected by GHSA-j5f8-grm9-p9fc Dependencies (osv-scanner)
high osv/GHSA-jgrx-mgxx-jf9v yarn.lock [email protected] (npm) is affected by GHSA-jgrx-mgxx-jf9v Dependencies (osv-scanner)
high osv/GHSA-jr5f-v2jv-69x6 yarn.lock [email protected] (npm) is affected by GHSA-jr5f-v2jv-69x6 Dependencies (osv-scanner)
high osv/GHSA-mh99-v99m-4gvg yarn.lock [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-p92q-9vqr-4j8v yarn.lock [email protected] (npm) is affected by GHSA-p92q-9vqr-4j8v Dependencies (osv-scanner)
high osv/GHSA-pf86-5x62-jrwf yarn.lock [email protected] (npm) is affected by GHSA-pf86-5x62-jrwf Dependencies (osv-scanner)
high osv/GHSA-pjwm-pj3p-43mv yarn.lock [email protected] (npm) is affected by GHSA-pjwm-pj3p-43mv Dependencies (osv-scanner)
high osv/GHSA-pmwg-cvhr-8vh7 yarn.lock [email protected] (npm) is affected by GHSA-pmwg-cvhr-8vh7 Dependencies (osv-scanner)
high osv/GHSA-q2pj-6v73-8rgj yarn.lock [email protected] (npm) is affected by GHSA-q2pj-6v73-8rgj Dependencies (osv-scanner)
high osv/GHSA-q42p-pg8m-cqh6 yarn.lock [email protected] (npm) is affected by GHSA-q42p-pg8m-cqh6 Dependencies (osv-scanner)
high osv/GHSA-qffp-2rhf-9h96 yarn.lock [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 Dependencies (osv-scanner)
high osv/GHSA-qhr7-859c-m2p7 yarn.lock [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 Dependencies (osv-scanner)
high osv/GHSA-qq89-hq3f-393p yarn.lock [email protected] (npm) is affected by GHSA-qq89-hq3f-393p Dependencies (osv-scanner)
high osv/GHSA-qqgx-2p2h-9c37 yarn.lock [email protected] (npm) is affected by GHSA-qqgx-2p2h-9c37 Dependencies (osv-scanner)
high osv/GHSA-qr28-fpjm-wq7f yarn.lock [email protected] (npm) is affected by GHSA-qr28-fpjm-wq7f Dependencies (osv-scanner)
high osv/GHSA-qwcr-r2fm-qrc7 yarn.lock [email protected] (npm) is affected by GHSA-qwcr-r2fm-qrc7 Dependencies (osv-scanner)
high osv/GHSA-qwcr-r2fm-qrc7 yarn.lock [email protected] (npm) is affected by GHSA-qwcr-r2fm-qrc7 Dependencies (osv-scanner)
high osv/GHSA-r292-9mhp-454m yarn.lock [email protected] (npm) is affected by GHSA-r292-9mhp-454m Dependencies (osv-scanner)
high osv/GHSA-r5fr-rjxr-66jc yarn.lock [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc Dependencies (osv-scanner)
high osv/GHSA-r628-mhmh-qjhw yarn.lock [email protected] (npm) is affected by GHSA-r628-mhmh-qjhw Dependencies (osv-scanner)
high osv/GHSA-r683-j2x4-v87g yarn.lock [email protected] (npm) is affected by GHSA-r683-j2x4-v87g Dependencies (osv-scanner)
high osv/GHSA-r683-j2x4-v87g yarn.lock [email protected] (npm) is affected by GHSA-r683-j2x4-v87g Dependencies (osv-scanner)
high osv/GHSA-r6q2-hw4h-h46w yarn.lock [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w Dependencies (osv-scanner)
high osv/GHSA-rgw5-rvv9-x895 yarn.lock [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 Dependencies (osv-scanner)
high osv/GHSA-rhx6-c78j-4q9w yarn.lock [email protected] (npm) is affected by GHSA-rhx6-c78j-4q9w Dependencies (osv-scanner)
high osv/GHSA-rrc9-gqf8-8rwg yarn.lock [email protected] (npm) is affected by GHSA-rrc9-gqf8-8rwg Dependencies (osv-scanner)
high osv/GHSA-w573-4hg7-7wgq yarn.lock [email protected] (npm) is affected by GHSA-w573-4hg7-7wgq Dependencies (osv-scanner)
high osv/GHSA-w5hq-g745-h8pq yarn.lock [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq Dependencies (osv-scanner)
high osv/GHSA-w5hq-g745-h8pq yarn.lock [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq Dependencies (osv-scanner)
high osv/GHSA-wm7h-9275-46v2 yarn.lock [email protected] (npm) is affected by GHSA-wm7h-9275-46v2 Dependencies (osv-scanner)
high osv/GHSA-xhpv-hc6g-r9c6 yarn.lock [email protected] (npm) is affected by GHSA-xhpv-hc6g-r9c6 Dependencies (osv-scanner)
high osv/GHSA-xjpj-3mr7-gcpf yarn.lock [email protected] (npm) is affected by GHSA-xjpj-3mr7-gcpf Dependencies (osv-scanner)
medium opengrep/javascript.lang.best-practice.lazy-load-module src/utils/genSchema.ts:15 Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The... Lint
medium opengrep/javascript.express.security.audit.express-session-hardcoded-secret src/startServer.ts:52 A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment... Static analysis (opengrep)
medium opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename src/utils/genSchema.ts:11 Detected that function argument `x` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... Static analysis (opengrep)
medium opengrep/javascript.lang.security.audit.detect-non-literal-require src/utils/genSchema.ts:15 Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low] Static analysis (opengrep)
medium opengrep/javascript.lang.security.html-in-template-string src/utils/sendEmail.ts:12 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
medium osv/GHSA-29mw-wpgm-hmr9 yarn.lock [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 Dependencies (osv-scanner)
medium osv/GHSA-2g4f-4pwh-qvx6 yarn.lock [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 Dependencies (osv-scanner)
medium osv/GHSA-2pr6-76vf-7546 yarn.lock [email protected] (npm) is affected by GHSA-2pr6-76vf-7546 Dependencies (osv-scanner)
medium osv/GHSA-2qvq-rjwj-gvw9 yarn.lock [email protected] (npm) is affected by GHSA-2qvq-rjwj-gvw9 Dependencies (osv-scanner)
medium osv/GHSA-2rp8-mm9q-fp49 yarn.lock [email protected] (npm) is affected by GHSA-2rp8-mm9q-fp49 Dependencies (osv-scanner)
medium osv/GHSA-332q-7ff2-57h2 yarn.lock [email protected] (npm) is affected by GHSA-332q-7ff2-57h2 Dependencies (osv-scanner)
medium osv/GHSA-3p68-rc4w-qgx5 yarn.lock [email protected] (npm) is affected by GHSA-3p68-rc4w-qgx5 Dependencies (osv-scanner)
medium osv/GHSA-43f8-2h32-f4cj yarn.lock [email protected] (npm) is affected by GHSA-43f8-2h32-f4cj Dependencies (osv-scanner)
medium osv/GHSA-4mjr-xmp4-gh2g yarn.lock [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g Dependencies (osv-scanner)
medium osv/GHSA-4mjr-xmp4-gh2g yarn.lock [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g Dependencies (osv-scanner)
medium osv/GHSA-4w2v-q235-vp99 yarn.lock [email protected] (npm) is affected by GHSA-4w2v-q235-vp99 Dependencies (osv-scanner)
medium osv/GHSA-4xc9-xhrj-v574 yarn.lock [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 Dependencies (osv-scanner)
medium osv/GHSA-4xcv-9jjx-gfj3 yarn.lock [email protected] (npm) is affected by GHSA-4xcv-9jjx-gfj3 Dependencies (osv-scanner)
medium osv/GHSA-5c9x-8gcm-mpgx yarn.lock [email protected] (npm) is affected by GHSA-5c9x-8gcm-mpgx Dependencies (osv-scanner)
medium osv/GHSA-5fw9-fq32-wv5p yarn.lock [email protected] (npm) is affected by GHSA-5fw9-fq32-wv5p Dependencies (osv-scanner)
medium osv/GHSA-6fc8-4gx4-v693 yarn.lock [email protected] (npm) is affected by GHSA-6fc8-4gx4-v693 Dependencies (osv-scanner)
medium osv/GHSA-6rw7-vpxm-498p yarn.lock [email protected] (npm) is affected by GHSA-6rw7-vpxm-498p Dependencies (osv-scanner)
medium osv/GHSA-6rw7-vpxm-498p yarn.lock [email protected] (npm) is affected by GHSA-6rw7-vpxm-498p Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-776f-qx25-q3cc yarn.lock [email protected] (npm) is affected by GHSA-776f-qx25-q3cc Dependencies (osv-scanner)
medium osv/GHSA-776f-qx25-q3cc yarn.lock [email protected] (npm) is affected by GHSA-776f-qx25-q3cc Dependencies (osv-scanner)
medium osv/GHSA-7q8q-rj6j-mhjq yarn.lock [email protected] (npm) is affected by GHSA-7q8q-rj6j-mhjq Dependencies (osv-scanner)
medium osv/GHSA-7wwv-vh3v-89cq yarn.lock [email protected] (npm) is affected by GHSA-7wwv-vh3v-89cq Dependencies (osv-scanner)
medium osv/GHSA-898c-q2cr-xwhg yarn.lock [email protected] (npm) is affected by GHSA-898c-q2cr-xwhg Dependencies (osv-scanner)
medium osv/GHSA-8j8c-7jfh-h6hx yarn.lock [email protected] (npm) is affected by GHSA-8j8c-7jfh-h6hx Dependencies (osv-scanner)
medium osv/GHSA-952p-6rrq-rcjv yarn.lock [email protected] (npm) is affected by GHSA-952p-6rrq-rcjv Dependencies (osv-scanner)
medium osv/GHSA-952p-6rrq-rcjv yarn.lock [email protected] (npm) is affected by GHSA-952p-6rrq-rcjv Dependencies (osv-scanner)
medium osv/GHSA-968p-4wvh-cqc8 yarn.lock @babel/[email protected] (npm) is affected by GHSA-968p-4wvh-cqc8 Dependencies (osv-scanner)
medium osv/GHSA-9ggv-8w38-r7pm yarn.lock [email protected] (npm) is affected by GHSA-9ggv-8w38-r7pm Dependencies (osv-scanner)
medium osv/GHSA-9q82-xgwf-vj6h yarn.lock [email protected] (npm) is affected by GHSA-9q82-xgwf-vj6h Dependencies (osv-scanner)
medium osv/GHSA-cm22-4g7w-348p yarn.lock [email protected] (npm) is affected by GHSA-cm22-4g7w-348p Dependencies (osv-scanner)
medium osv/GHSA-cxjh-pqwp-8mfp yarn.lock [email protected] (npm) is affected by GHSA-cxjh-pqwp-8mfp Dependencies (osv-scanner)
medium osv/GHSA-f52g-6jhx-586p yarn.lock [email protected] (npm) is affected by GHSA-f52g-6jhx-586p Dependencies (osv-scanner)
medium osv/GHSA-f5x3-32g6-xq36 yarn.lock [email protected] (npm) is affected by GHSA-f5x3-32g6-xq36 Dependencies (osv-scanner)
medium osv/GHSA-f886-m6hf-6m8v yarn.lock [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v Dependencies (osv-scanner)
medium osv/GHSA-fvcv-3m26-pcqx yarn.lock [email protected] (npm) is affected by GHSA-fvcv-3m26-pcqx Dependencies (osv-scanner)
medium osv/GHSA-g9r4-xpmj-mj65 yarn.lock [email protected] (npm) is affected by GHSA-g9r4-xpmj-mj65 Dependencies (osv-scanner)
medium osv/GHSA-gvwx-54wh-qm9j yarn.lock [email protected] (npm) is affected by GHSA-gvwx-54wh-qm9j Dependencies (osv-scanner)
medium osv/GHSA-h67p-54hq-rp68 yarn.lock [email protected] (npm) is affected by GHSA-h67p-54hq-rp68 Dependencies (osv-scanner)
medium osv/GHSA-hj48-42vr-x3v9 yarn.lock [email protected] (npm) is affected by GHSA-hj48-42vr-x3v9 Dependencies (osv-scanner)
medium osv/GHSA-j5g3-5c8r-7qfx yarn.lock [email protected] (npm) is affected by GHSA-j5g3-5c8r-7qfx Dependencies (osv-scanner)
medium osv/GHSA-jchw-25xp-jwwc yarn.lock [email protected] (npm) is affected by GHSA-jchw-25xp-jwwc Dependencies (osv-scanner)
medium osv/GHSA-m6fv-jmcg-4jfg yarn.lock [email protected] (npm) is affected by GHSA-m6fv-jmcg-4jfg Dependencies (osv-scanner)
medium osv/GHSA-m7pr-hjqh-92cm yarn.lock [email protected] (npm) is affected by GHSA-m7pr-hjqh-92cm Dependencies (osv-scanner)
medium osv/GHSA-mh29-5h37-fv8m yarn.lock [email protected] (npm) is affected by GHSA-mh29-5h37-fv8m Dependencies (osv-scanner)
medium osv/GHSA-mmx7-hfxf-jppx yarn.lock [email protected] (npm) is affected by GHSA-mmx7-hfxf-jppx Dependencies (osv-scanner)
medium osv/GHSA-p8p7-x288-28g6 yarn.lock [email protected] (npm) is affected by GHSA-p8p7-x288-28g6 Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-pfrx-2q88-qq97 yarn.lock [email protected] (npm) is affected by GHSA-pfrx-2q88-qq97 Dependencies (osv-scanner)
medium osv/GHSA-pw2r-vq6v-hr8c yarn.lock [email protected] (npm) is affected by GHSA-pw2r-vq6v-hr8c Dependencies (osv-scanner)
medium osv/GHSA-pxg6-pf52-xh8x yarn.lock [email protected] (npm) is affected by GHSA-pxg6-pf52-xh8x Dependencies (osv-scanner)
medium osv/GHSA-q2c6-c6pm-g3gh yarn.lock [email protected] (npm) is affected by GHSA-q2c6-c6pm-g3gh Dependencies (osv-scanner)
medium osv/GHSA-q2hr-2g5m-vwhr yarn.lock [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr Dependencies (osv-scanner)
medium osv/GHSA-qrmc-fj45-qfc2 yarn.lock [email protected] (npm) is affected by GHSA-qrmc-fj45-qfc2 Dependencies (osv-scanner)
medium osv/GHSA-qw6h-vgh9-j6wx yarn.lock [email protected] (npm) is affected by GHSA-qw6h-vgh9-j6wx Dependencies (osv-scanner)
medium osv/GHSA-r4q5-vmmm-2653 yarn.lock [email protected] (npm) is affected by GHSA-r4q5-vmmm-2653 Dependencies (osv-scanner)
medium osv/GHSA-rv95-896h-c2vc yarn.lock [email protected] (npm) is affected by GHSA-rv95-896h-c2vc Dependencies (osv-scanner)
medium osv/GHSA-v39p-96qg-c8rf yarn.lock [email protected] (npm) is affected by GHSA-v39p-96qg-c8rf Dependencies (osv-scanner)
medium osv/GHSA-v88g-cgmw-v5xw yarn.lock [email protected] (npm) is affected by GHSA-v88g-cgmw-v5xw Dependencies (osv-scanner)
medium osv/GHSA-vcc3-ghjq-m6fr yarn.lock [email protected] (npm) is affected by GHSA-vcc3-ghjq-m6fr Dependencies (osv-scanner)
medium osv/GHSA-vf2m-468p-8v99 yarn.lock [email protected] (npm) is affected by GHSA-vf2m-468p-8v99 Dependencies (osv-scanner)
medium osv/GHSA-vfrc-7r7c-w9mx yarn.lock [email protected] (npm) is affected by GHSA-vfrc-7r7c-w9mx Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vmf3-w455-68vh yarn.lock [email protected] (npm) is affected by GHSA-vmf3-w455-68vh Dependencies (osv-scanner)
medium osv/GHSA-w42g-7vfc-xf37 yarn.lock [email protected] (npm) is affected by GHSA-w42g-7vfc-xf37 Dependencies (osv-scanner)
medium osv/GHSA-w42g-7vfc-xf37 yarn.lock [email protected] (npm) is affected by GHSA-w42g-7vfc-xf37 Dependencies (osv-scanner)
medium osv/GHSA-w42g-7vfc-xf37 yarn.lock [email protected] (npm) is affected by GHSA-w42g-7vfc-xf37 Dependencies (osv-scanner)
medium osv/GHSA-w8wr-v893-vjvp yarn.lock [email protected] (npm) is affected by GHSA-w8wr-v893-vjvp Dependencies (osv-scanner)
medium osv/GHSA-w9j2-pvgh-6h63 yarn.lock [email protected] (npm) is affected by GHSA-w9j2-pvgh-6h63 Dependencies (osv-scanner)
medium osv/GHSA-wf5p-g6vw-rhxx yarn.lock [email protected] (npm) is affected by GHSA-wf5p-g6vw-rhxx Dependencies (osv-scanner)
medium osv/GHSA-x5rq-j2xg-h7qm yarn.lock [email protected] (npm) is affected by GHSA-x5rq-j2xg-h7qm Dependencies (osv-scanner)
medium osv/GHSA-xw65-4hp5-5hc7 yarn.lock [email protected] (npm) is affected by GHSA-xw65-4hp5-5hc7 Dependencies (osv-scanner)
medium osv/GHSA-xx6v-rp6x-q39c yarn.lock [email protected] (npm) is affected by GHSA-xx6v-rp6x-q39c Dependencies (osv-scanner)
medium osv/GHSA-xxjr-mmjv-4gpg yarn.lock [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg Dependencies (osv-scanner)
medium osv/MAL-2023-462 yarn.lock [email protected] (npm) is affected by MAL-2023-462 Dependencies (osv-scanner)
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:25 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:39 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:39 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:54 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:68 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:68 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/utils/TestClient.ts:86 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low osv/GHSA-442j-39wm-28r2 yarn.lock [email protected] (npm) is affected by GHSA-442j-39wm-28r2 Dependencies (osv-scanner)
low osv/GHSA-73rr-hh4g-fpgx yarn.lock [email protected] (npm) is affected by GHSA-73rr-hh4g-fpgx Dependencies (osv-scanner)
low osv/GHSA-76c9-3jph-rj3q yarn.lock [email protected] (npm) is affected by GHSA-76c9-3jph-rj3q Dependencies (osv-scanner)
low osv/GHSA-c6rq-rjc2-86v2 yarn.lock [email protected] (npm) is affected by GHSA-c6rq-rjc2-86v2 Dependencies (osv-scanner)
low osv/GHSA-j965-2qgj-vjmq yarn.lock [email protected] (npm) is affected by GHSA-j965-2qgj-vjmq Dependencies (osv-scanner)
low osv/GHSA-v422-hmwv-36x6 yarn.lock [email protected] (npm) is affected by GHSA-v422-hmwv-36x6 Dependencies (osv-scanner)
low osv/GHSA-v422-hmwv-36x6 yarn.lock [email protected] (npm) is affected by GHSA-v422-hmwv-36x6 Dependencies (osv-scanner)
low osv/GHSA-v6h2-p8h4-qcjw yarn.lock [email protected] (npm) is affected by GHSA-v6h2-p8h4-qcjw Dependencies (osv-scanner)
low osv/GHSA-w7rc-rwvf-8q5r yarn.lock [email protected] (npm) is affected by GHSA-w7rc-rwvf-8q5r Dependencies (osv-scanner)
low osv/GHSA-w7rc-rwvf-8q5r yarn.lock [email protected] (npm) is affected by GHSA-w7rc-rwvf-8q5r Dependencies (osv-scanner)
low osv/GHSA-xhjh-pmcv-23jw yarn.lock [email protected] (npm) is affected by GHSA-xhjh-pmcv-23jw Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4148
Tests and CICode qualityok—0
Type safetyCode qualityok—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.1211
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4144
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-14ea96c26a257dprov-5+qual-2+sec-20%6748
2026-11-14ea96c26a257dprov-4+qual-2+sec-20%6748

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/benawad/graphql-ts-server-boilerplate/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/benawad/graphql-ts-server-boilerplate/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/benawad/graphql-ts-server-boilerplate/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/benawad/graphql-ts-server-boilerplate/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/benawad/graphql-ts-server-boilerplate/security.svg)](https://repotrust.synapticcyber.com/r/github.com/benawad/graphql-ts-server-boilerplate/)
Full text report

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 50% 100%
Code quality 67 adequate 90% 100%
Security 48 poor 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 0.0%
Month Lines added Attributed to AI
2018-04 245 0%
2018-05 1,520 0%
2018-06 72 0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.52, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: type safety.

Area Score
Complexity (lizard) 100
Duplication 100
Code smells (Opengrep) 50
Tests and CI 55
Documentation 40
Type safety 0
Process (Scorecard review/maintenance) n/a
  • Functions: 36; mean complexity 1.6, 90th percentile 3; 0 complex and 0 long functions
  • Duplicated lines: 0.0% of 465 compared
  • Tests: 411 test lines for 796 source lines (ratio 0.52); CI test commands: none detected; 68% of recent source commits also change tests
  • Docs missing or thin: license, contributing, changelog

Security

Security posture is poor: 211 known vulnerabilities in 87 dependencies. Weakest area: dependencies.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 54
Vulnerable dependencies (OSV) 0
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a

  • Known vulnerabilities: 211 in 87 packages (critical 25, high 96, medium 66, low 11)

  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
critical osv/GHSA-934x-72xh-5hrg: [email protected] (npm) is affected by GHSA-934x-72xh-5hrg yarn.lock
critical osv/GHSA-67hx-6x53-jw92: [email protected] (npm) is affected by GHSA-67hx-6x53-jw92 yarn.lock
critical osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 yarn.lock
critical osv/GHSA-8r6j-v8pm-fqw3: [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 yarn.lock
critical osv/GHSA-2w6w-674q-4c4q: [email protected] (npm) is affected by GHSA-2w6w-674q-4c4q yarn.lock
critical osv/GHSA-765h-qjxv-5f44: [email protected] (npm) is affected by GHSA-765h-qjxv-5f44 yarn.lock
critical osv/GHSA-8r5x-fm3f-whwj: [email protected] (npm) is affected by GHSA-8r5x-fm3f-whwj yarn.lock
critical osv/GHSA-f2jv-r9rf-7988: [email protected] (npm) is affected by GHSA-f2jv-r9rf-7988 yarn.lock
critical osv/GHSA-p8wg-vrv2-v86f: [email protected] (npm) is affected by GHSA-p8wg-vrv2-v86f yarn.lock
critical osv/GHSA-w457-6q6x-cgp9: [email protected] (npm) is affected by GHSA-w457-6q6x-cgp9 yarn.lock
critical osv/GHSA-896r-f27r-55mw: [email protected] (npm) is affected by GHSA-896r-f27r-55mw yarn.lock
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-fhjf-83wg-r2j9: [email protected] (npm) is affected by GHSA-fhjf-83wg-r2j9 yarn.lock
critical osv/GHSA-6fw4-hr69-g3rv: [email protected] (npm) is affected by GHSA-6fw4-hr69-g3rv yarn.lock
critical osv/GHSA-jqcg-44mw-7w3h: [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h yarn.lock
critical osv/GHSA-4g88-fppr-53pp: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp yarn.lock
critical osv/GHSA-4g88-fppr-53pp: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp yarn.lock
critical osv/GHSA-w7jw-789q-3m8p: [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p yarn.lock
critical osv/GHSA-23hp-3jrh-7fpw: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw yarn.lock
critical osv/GHSA-29xr-v42j-r956: [email protected] (npm) is affected by GHSA-29xr-v42j-r956 yarn.lock
critical osv/GHSA-fx4w-v43j-vc45: [email protected] (npm) is affected by GHSA-fx4w-v43j-vc45 yarn.lock
critical osv/GHSA-pf2j-9qmp-jqr2: [email protected] (npm) is affected by GHSA-pf2j-9qmp-jqr2 yarn.lock

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 796; test lines: 411
Language Lines
TypeScript 1,195
JavaScript 12