binder-git/seth-haus

• Repository: https://github.com/binder-git/seth-haus
• Commit: 8277e62784c03b144feea6d4823aef5fcb681073
• Generated: 2026-11-14T14:52:03+00:00
• Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 4.3%

• Estimated AI-generated share: 0.0%

• Stylometry index: 0.70 per 1,000 lines (narrated steps 2, placeholders 2, assistant phrasing 0, emoji 10). Reported as a signal, not scored.

Evidence

• 3,940 lines of first-party code in ~4.0h (985 lines/hour, 1 commit session) (6f1a97e48bcc)
• step-by-step narration comment: // First, fetch SKU list items to get the SKU IDs (netlify/func)
• step-by-step narration comment: // First, get the SKU list ID for the market (ui/src/api/c)
• placeholder or demo-only phrasing: // This is a placeholder. In a real implementation, you would get the market from a store or props (ui/src/conte)
• placeholder or demo-only phrasing: // If you are still using these directly, you might need to add their VITE_ counterparts, (ui/src/vite-)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.05, no CI test run detected; 13% of function code in complex or long functions; 13% duplicated lines. Weakest area: lint.

• Functions: 883; mean complexity 2.3, 90th percentile 4; 13 complex and 2 long functions
• Duplicated lines: 12.6% of 11,197 compared
• Tests: 767 test lines for 15,661 source lines (ratio 0.05); CI test commands: none detected; 11% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• requestStream in ui/src/brain/http-client.ts: complexity 28, 71 lines
• resolve$1 in ui/.pnp.loader.mjs: complexity 26, 58 lines
• mapCommerceLayerProductToAppProduct in ui/src/utils/commerce-layer-mapper.ts: complexity 25, 48 lines
• getAccessToken in netlify/functions/src/product-listing.ts: complexity 24, 99 lines
• getAccessToken in netlify/functions/src/featured-products.ts: complexity 21, 83 lines

Security

Security posture is weak: 331 known vulnerabilities in 94 dependencies. Weakest area: dependencies.

• Known vulnerabilities: 331 in 94 packages (critical 7, high 173, medium 123, low 28)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 15,661; test lines: 767