cpaczek/vibe-interviewing

AI-era technical interview platform. Evaluate how engineers work WITH AI, not what they memorize.

https://github.com/cpaczek/vibe-interviewing · commit da6867cf2b2b · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/cpaczek/vibe-interviewing
Commit: da6867cf2b2bf4c83a9cbf249a9e96e20315ec46
Generated: 2026-11-13T23:55:47+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	100	explicit	78%	100%
Code quality	69	adequate	90%	100%
Security	56	weak	85%	100%

AI provenance

Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals.

Explicitly attributed share (lower bound): 100.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 100.0%

AI tool	Attributed commits	Lines added
Claude Code	33	11,630

AI tooling configured in repo: claude-code

Current source lines last changed by AI-attributed commits: 4,975 of 4,975.

Too few lines in one group to compare finding densities.

Month	Lines added	Attributed to AI
2026-03	11,630	100%

Evidence

Claude Code: trailer 'Co-Authored-By: Claude' (da6867cf2b2b)
Claude Code: trailer 'Co-Authored-By: Claude' (df99c29114fc)
Claude Code: trailer 'Co-Authored-By: Claude' (987592c60333)
Claude Code: trailer 'Co-Authored-By: Claude' (2e041f14f492)
Claude Code: trailer 'Co-Authored-By: Claude' (f9fbb07b7d75)
Claude Code: trailer 'Co-Authored-By: Claude' (c42351627b33)
Claude Code: trailer 'Co-Authored-By: Claude' (6baf3391360b)
Claude Code: trailer 'Co-Authored-By: Claude' (6d8d6640c396)
Claude Code: trailer 'Co-Authored-By: Claude' (bbdd4df243f9)
Claude Code: trailer 'Co-Authored-By: Claude' (a7657110a3fe)
Claude Code: trailer 'Co-Authored-By: Claude' (ff7904f08833)
Claude Code: trailer 'Co-Authored-By: Claude' (7b7645b157e9)
Claude Code: trailer 'Co-Authored-By: Claude' (9bdb1720fe59)
Claude Code: trailer 'Co-Authored-By: Claude' (a1f35197b947)
Claude Code: trailer 'Co-Authored-By: Claude' (b6bfb4aaeb96)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.19, CI runs tests; 22% of function code in complex or long functions; 11% duplicated lines. Weakest area: duplication.

Area	Score
Complexity (lizard)	52
Duplication	51
Code smells (Opengrep)	82
Tests and CI	74
Documentation	80
Type safety	100
Process (Scorecard review/maintenance)	n/a

Functions: 268; mean complexity 2.7, 90th percentile 6; 7 complex and 3 long functions
Duplicated lines: 11.3% of 3,393 compared
Tests: 932 test lines for 4,975 source lines (ratio 0.19); CI test commands: npm test, pnpm test; 37% of recent source commits also change tests
Docs missing or thin: changelog

Most complex functions:

Security

Security posture is weak: 102 known vulnerabilities in 26 dependencies; 6 high-severity workflow issues. Weakest area: posture.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	100
Vulnerable dependencies (OSV)	4
CI workflows (zizmor)	28
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	n/a

Known vulnerabilities: 102 in 26 packages (critical 6, high 43, medium 43, low 10)
Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles

Top findings

Severity	Finding	Location
critical	`osv/GHSA-hffm-xvc3-vprc`: [email protected] (npm) is affected by GHSA-hffm-xvc3-vprc	pnpm-lock.yaml
critical	`osv/GHSA-x6jw-m9v5-85vh`: [email protected] (npm) is affected by GHSA-x6jw-m9v5-85vh	pnpm-lock.yaml
critical	`osv/GHSA-5gmw-xhrv-c9v3`: [email protected] (npm) is affected by GHSA-5gmw-xhrv-c9v3	pnpm-lock.yaml
critical	`osv/GHSA-85c8-ppgw-ccpr`: [email protected] (npm) is affected by GHSA-85c8-ppgw-ccpr	pnpm-lock.yaml
critical	`osv/GHSA-3qcw-2rhx-2726`: [email protected] (npm) is affected by GHSA-3qcw-2rhx-2726	pnpm-lock.yaml
critical	`osv/GHSA-5xrq-8626-4rwp`: [email protected] (npm) is affected by GHSA-5xrq-8626-4rwp	pnpm-lock.yaml
high	`osv/GHSA-3jxr-9vmj-r5cp`: [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp	pnpm-lock.yaml
high	`osv/GHSA-6j4f-fj2g-mc7p`: [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p	pnpm-lock.yaml
high	`osv/GHSA-mh99-v99m-4gvg`: [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg	pnpm-lock.yaml
high	`osv/GHSA-qhr7-859c-m2p7`: [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7	pnpm-lock.yaml
high	`osv/GHSA-rgw5-rvv9-x895`: [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895	pnpm-lock.yaml
high	`osv/GHSA-73wf-gq98-2v4g`: [email protected] (npm) is affected by GHSA-73wf-gq98-2v4g	pnpm-lock.yaml
high	`osv/GHSA-c83g-rgw3-j3cx`: [email protected] (npm) is affected by GHSA-c83g-rgw3-j3cx	pnpm-lock.yaml
high	`osv/GHSA-2883-xcg3-v3hh`: [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh	pnpm-lock.yaml
high	`osv/GHSA-52cp-r559-cp3m`: [email protected] (npm) is affected by GHSA-52cp-r559-cp3m	pnpm-lock.yaml
high	`osv/GHSA-5p4m-2wfm-xmqj`: [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj	pnpm-lock.yaml
high	`osv/GHSA-2883-xcg3-v3hh`: [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh	pnpm-lock.yaml
high	`osv/GHSA-52cp-r559-cp3m`: [email protected] (npm) is affected by GHSA-52cp-r559-cp3m	pnpm-lock.yaml
high	`osv/GHSA-5p4m-2wfm-xmqj`: [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj	pnpm-lock.yaml
high	`osv/GHSA-28wg-ghj8-5hjv`: [email protected] (npm) is affected by GHSA-28wg-ghj8-5hjv	pnpm-lock.yaml
high	`osv/GHSA-2v37-7h3g-55p8`: [email protected] (npm) is affected by GHSA-2v37-7h3g-55p8	pnpm-lock.yaml
high	`osv/GHSA-xwg4-73v4-xw9w`: [email protected] (npm) is affected by GHSA-xwg4-73v4-xw9w	pnpm-lock.yaml
high	`osv/GHSA-c2c7-rcm5-vvqj`: [email protected] (npm) is affected by GHSA-c2c7-rcm5-vvqj	pnpm-lock.yaml
high	`osv/GHSA-c2c7-rcm5-vvqj`: [email protected] (npm) is affected by GHSA-c2c7-rcm5-vvqj	pnpm-lock.yaml
high	`osv/GHSA-6g55-p6wh-862q`: [email protected] (npm) is affected by GHSA-6g55-p6wh-862q	pnpm-lock.yaml

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 4,975; test lines: 932

Language	Lines
TypeScript	5,601
JavaScript	306

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/cpaczek/vibe-interviewing/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/cpaczek/vibe-interviewing/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/cpaczek/vibe-interviewing/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/cpaczek/vibe-interviewing/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/cpaczek/vibe-interviewing/security.svg)](https://repotrust.synapticcyber.com/r/github.com/cpaczek/vibe-interviewing/)