RepoTrust

Leaderboard github.com

dpc/mioco.pre-0.9

Scalable, coroutine-based, asynchronous IO handling library for Rust programming language. (aka MIO COroutines).

  • View repository ↗
  • Rust
  • ★ 460
  • commit 23484def1022
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

64/100

weak

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

73/100

adequate

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pace0
  • Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

  1. 2015-06678 · 0% AI
  2. 2015-071,567 · 0% AI
  3. 2015-081,729 · 0% AI
  4. 2015-092,109 · 0% AI
  5. 2015-10679 · 0% AI
  6. 2015-11326 · 0% AI
  7. 2015-122,672 · 0% AI
  8. 2016-011,850 · 0% AI
  9. 2016-023,346 · 0% AI
  10. 2016-031,374 · 0% AI
  11. 2016-04361 · 0% AI
  12. 2016-05355 · 0% AI
  13. 2016-06177 · 0% AI
  14. 2016-07271 · 0% AI
  15. 2016-08102 · 0% AI
  16. 2016-120 · 0% AI
  17. 2017-040 · 0% AI
  18. 2017-117 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
375
effective_loc
17,603
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
483.62
measured_loc
17,603
median_loc_per_hour
72
pr_timed_units
1
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
17,603
work_units
197
Release velocityok
flagged_releases
0
max_loc_per_day
113.30
releases
22
Coding styleok
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
0
files:placeholder
0
index
0
lines_scanned
5,895
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

64 weak

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 9% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity100
  • Duplication58
  • Lint and smells100
  • Tests and CI15
  • Documentation65
  • Type safetynot measured
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok
complex_functions
0
function_nloc
3,389
functions
356
long_functions
0
many_param_functions
1
mean_ccn
1.75
p90_ccn
3
risky_nloc_share
0.0%
Duplication (jscpd)ok9 items
compared_lines
3,612
duplicated_lines
329
duplicated_share
9.1%
files
23
Lintok
findings
0
scanned_lines
5,829
weighted_findings
0
Tests and CIok1 item
  • CI config: .travis.yml .travis.yml
check:ci_present
yes
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
1
cochange_commits
237
cochange_share
0.0%
source_lines
5,895
test_lines
0
test_ratio
0
Documentationok1 item
  • README.md README.md
check:changelog
no
check:contributing
no
check:license
yes
check:readme
yes
readme_lines
89
Type safetyskipped

Security

73 adequate

Security posture is adequate: no high-impact findings. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)75
  • Vulnerable dependenciesnot measured
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
16
declared
16
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
19
findings_high
0
findings_low
19
findings_medium
0
parse_errors
2
scanned_lines
5,829
weighted_findings
4.75
Dependencies (osv-scanner)skipped
CI workflows (zizmor)skipped
Security postureok1 item
  • Cargo.toml has no lockfile alongside it (unpinned dependencies) Cargo.toml
check:dependency_updates
no
check:lockfiles
no
check:security_policy
no
check:signed_commits
no
signed_commit_share
0.0%
unpinned_manifests
1
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

19 low

SeverityRuleLocationMessageTool
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:191 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:215 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:226 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:243 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:251 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/coroutine.rs:576 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/evented.rs:55 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:1010 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:1057 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:1074 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:882 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:898 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:936 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:944 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:967 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:984 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage src/mod.rs:995 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage tests.rs:562 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)
low opengrep/rust.lang.security.unsafe-usage tests.rs:818 Detected 'unsafe' usage, please audit for secure usage [confidence high] Static analysis (opengrep)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceokprov-40
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4140
Tests and CICode qualityok—0
Type safetyCode qualityskipped—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityskipped—0
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b41419
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-1423484def1022prov-5+qual-2+sec-20%6473
2026-11-1423484def1022prov-4+qual-2+sec-20%6473

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/dpc/mioco.pre-0.9/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/dpc/mioco.pre-0.9/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/dpc/mioco.pre-0.9/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/dpc/mioco.pre-0.9/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/dpc/mioco.pre-0.9/security.svg)](https://repotrust.synapticcyber.com/r/github.com/dpc/mioco.pre-0.9/)
Full text report
  • Repository: https://github.com/dpc/mioco.pre-0.9
  • Commit: 23484def102216b3cfc09af4e3a9b15d622dc77e
  • Generated: 2026-11-14T14:52:04+00:00
  • Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 64 weak 90% 100%
Security 73 adequate 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 0.0%
Month Lines added Attributed to AI
2015-10 679 0%
2015-11 326 0%
2015-12 2,672 0%
2016-01 1,850 0%
2016-02 3,346 0%
2016-03 1,374 0%
2016-04 361 0%
2016-05 355 0%
2016-06 177 0%
2016-07 271 0%
2016-08 102 0%
2017-11 7 0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 9% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 100
Duplication 58
Code smells (Opengrep) 100
Tests and CI 15
Documentation 65
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 356; mean complexity 1.8, 90th percentile 3; 0 complex and 0 long functions
  • Duplicated lines: 9.1% of 3,612 compared
  • Tests: 0 test lines for 5,895 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: contributing, changelog

Security

Security posture is adequate: no high-impact findings. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 75
Vulnerable dependencies (OSV) n/a
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a
  • Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles

Top findings

Severity Finding Location
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:191
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:215
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:226
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:243
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:251
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/coroutine.rs:576
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/evented.rs:55
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:882
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:898
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:936
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:944
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:967
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:984
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:995
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:1010
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:1057
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] src/mod.rs:1074
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] tests.rs:562
low opengrep/rust.lang.security.unsafe-usage: Detected 'unsafe' usage, please audit for secure usage [confidence high] tests.rs:818

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 5,895; test lines: 0
Language Lines
Rust 5,829
PowerShell 66