Leaderboard github.com
fmflurry/myna
Local-first AI meeting recorder and summarizer. On-device STT (Parakeet-TDT) and summarization (Qwen2.5). No cloud.
AI provenance
1%
possible
- Confidence
- 65%
- Coverage
- 100%
Estimated share of AI-generated code. Explicit attribution is a lower bound.
Code quality
90/100
strong
- Confidence
- 90%
- Coverage
- 100%
Complexity, duplication, lint density, tests, CI, docs and review process.
Security
48/100
poor
- Confidence
- 85%
- Coverage
- 100%
Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.
AI provenance
1% possible
Weak signals consistent with AI-assisted development. 2 commit(s) carry explicit AI attribution, too few to characterize the codebase.
How the score is built
- Explicitly attributed share1%
- Unattributed share in AI-pace bursts44%
- Estimated AI-generated share1%
- AI tool configuration files2
- Work sessions at AI pace10
- Releases at AI pace1
- Coding-style index (1.0+ means possible)0.12
Attributed AI tools
| Tool | Commits | Lines added | First seen | Last seen |
|---|---|---|---|---|
| Cursor agent | 2 | 956 | 2026-11-03 | 2026-11-04 |
Lines added per month all AI-attributed share
- 2026-0857,926 · 0% AI
- 2026-0948,684 · 0% AI
- 2026-1023 · 0% AI
- 2026-11956 · 100% AI
Findings in AI-attributed lines vs the rest
From git blame: 953 lines trace to AI-attributed commits, 55,451 to others. Reported, not scored.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Code quality | 0.00 | 0.04 | 0.00× |
| Security | 0.00 | 1.35 | 0.00× |
Evidence by analyzer
Explicit AI attributionok3 items
- Cursor agent: 2 attributed commits, 956 lines added
- Cursor agent: trailer 'Co-authored-by: Cursor Agent'
- Cursor agent: trailer 'Co-authored-by: Cursor Agent'
- attributed_commit_share
- 1.5%
- attributed_commits
- 2
- attributed_loc
- 956
- attributed_loc_share
- 0.9%
- commits
- 133
- effective_loc
- 107,589
- tools_detected
- 1
AI tool configurationok2 items
- artifacts
- 2
- earliest_adoption
- 2026-08-25
- tools_configured
- 1
- workflow_agents
- 0
Commit velocityok10 items
- 12,040 lines of first-party code in ~4.0h (2,993 lines/hour, 11 commit session)
- 9,879 lines of first-party code in ~4.0h (2,466 lines/hour, 6 commit session)
- 7,410 lines of first-party code in ~4.2h (1,779 lines/hour, 13 commit session)
- 1,380 lines of first-party code in ~0.9h (1,518 lines/hour, 3 commit session)
- 2,094 lines of first-party code in ~2.0h (1,038 lines/hour, 1 commit session)
- 3,298 lines of first-party code in ~3.4h (974 lines/hour, 8 commit session)
- 3,733 lines of first-party code in ~4.0h (933 lines/hour, 1 commit session)
- 1,899 lines of first-party code in ~2.4h (778 lines/hour, 1 commit session)
- 3,010 lines of first-party code in ~4.0h (752 lines/hour, 1 commit session)
- 2,347 lines of first-party code in ~4.0h (587 lines/hour, 1 commit session)
- excluded_import_loc
- 49,955
- flagged_loc
- 47,090
- flagged_loc_share
- 81.7%
- flagged_units
- 10
- max_loc_per_hour
- 2,993.16
- measured_loc
- 57,634
- median_loc_per_hour
- 278.36
- pr_timed_units
- 1
- pre_ai_era_burst_loc
- 0
- pre_ai_era_bursts
- 0
- pre_ai_era_measured_loc
- 0
- work_units
- 29
Release velocityok1 item
- flagged_releases
- 1
- max_loc_per_day
- 23,151.30
- releases
- 17
Coding styleok3 items
- step-by-step narration comment: // Step 1: merge among clusters that have a centroid.
- step-by-step narration comment: // Step 2: per-group duration-weighted centroid + total duration.
- step-by-step narration comment: // Step 3: absorb short groups, then compose.
- count:assistant_voice
- 0
- count:emoji_in_code
- 7
- count:narrated_steps
- 3
- count:placeholder
- 0
- files:assistant_voice
- 0
- files:emoji_in_code
- 4
- files:narrated_steps
- 1
- files:placeholder
- 0
- index
- 0.12
- lines_scanned
- 56,404
- per_kloc:assistant_voice
- 0
- per_kloc:emoji_in_code
- 0.12
- per_kloc:narrated_steps
- 0.05
- per_kloc:placeholder
- 0
Findings in AI-written linesok
- ai_lines
- 953
- blame_failures
- 0
- files_blamed
- 322
- other_lines
- 55,451
- quality:ai_findings
- 0
- quality:ai_per_kloc
- 0
- quality:other_findings
- 2
- quality:other_per_kloc
- 0.04
- quality:ratio
- 0
- security:ai_findings
- 0
- security:ai_per_kloc
- 0
- security:other_findings
- 75
- security:other_per_kloc
- 1.35
- security:ratio
- 0
Code quality
90 strong
Code quality is strong: test-to-source ratio 0.84, CI runs tests; 8% of function code in complex or long functions; 4% duplicated lines. Weakest area: duplication.
How the score is built
- Complexity79
- Duplication78
- Lint and smells100
- Tests and CI100
- Documentation85
- Type safety100
- Review processnot measured
Evidence by analyzer
Complexity (lizard)ok10 items
- wav_duration_sec in app/src-tauri/src/commands/meetings.rs: complexity 23, 49 lines
- run_retranscribe in app/src-tauri/src/commands/import.rs: complexity 19, 99 lines
- validate_judge_output in app/src-tauri/src/diarize_judge.rs: complexity 19, 75 lines
- attach_system_audio_to_ring in crates/myna-audio/src/capture.rs: complexity 19, 81 lines
- migrate_data_root_with_test_options in app/src-tauri/src/commands/storage.rs: complexity 18, 43 lines
- move_entry in app/src-tauri/src/commands/storage.rs: complexity 16, 43 lines
- strip_verbatim_prefix in app/src-tauri/src/model_init.rs: complexity 9, 1006 lines
- buildScreenshotFacade in ui/src/app/screenshot/screenshot-facade.stub.ts: complexity 7, 119 lines
- load_returns_default_when_preferences_file_is_truncated in app/src-tauri/src/update_prefs.rs: complexity 3, 203 lines
- load_returns_default_when_preferences_file_is_truncated in app/src-tauri/src/template_prefs.rs: complexity 2, 300 lines
- complex_functions
- 6
- function_nloc
- 28,078
- functions
- 2,969
- long_functions
- 5
- many_param_functions
- 5
- mean_ccn
- 2.04
- p90_ccn
- 4
- risky_nloc_share
- 7.8%
Duplication (jscpd)ok10 items
- 6+ duplicated lines: app/src-tauri/src/commands/export.rs:275 and app/src-tauri/src/commands/summary.rs:746
- 6+ duplicated lines: app/src-tauri/src/commands/folders.rs:225 and app/src-tauri/src/commands/placement.rs:190
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:146 and app/src-tauri/src/commands/import.rs:986
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:964 and app/src-tauri/src/commands/recording.rs:142
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:1078 and crates/myna-stt/src/wav.rs:205
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:1168 and crates/myna-stt/src/transcript.rs:397
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:1170 and crates/myna-stt/src/relabel.rs:400
- 6+ duplicated lines: app/src-tauri/src/commands/import.rs:1784 and app/src-tauri/src/commands/summary.rs:1106
- 6+ duplicated lines: app/src-tauri/src/commands/meetings.rs:128 and app/src-tauri/src/commands/meetings.rs:1024
- 6+ duplicated lines: app/src-tauri/src/commands/models.rs:284 and app/src-tauri/src/commands/models.rs:303
- compared_lines
- 41,172
- duplicated_lines
- 1,719
- duplicated_share
- 4.2%
- files
- 322
Lintok
- category:correctness
- 2
- findings
- 2
- scanned_lines
- 55,638
- weighted_findings
- 0.50
Tests and CIok4 items
- CI config: .github/workflows/ci.yml
.github/workflows/ci.yml - CI config: .github/workflows/release.yml
.github/workflows/release.yml - CI runs tests (go test, cargo test)
- CI runs linters (clippy, cargo fmt, shellcheck)
- check:ci_present
- yes
- check:ci_runs_lint
- yes
- check:ci_runs_tests
- yes
- check:has_tests
- yes
- check:test_ratio
- yes
- check:tests_cochange
- yes
- ci_files
- 2
- cochange_commits
- 83
- cochange_share
- 63.9%
- source_lines
- 56,404
- test_lines
- 47,127
- test_ratio
- 0.84
Documentationok3 items
- README.md
README.md - LICENSE
LICENSE - CHANGELOG.md
CHANGELOG.md
- check:changelog
- yes
- check:contributing
- no
- check:license
- yes
- check:readme
- yes
- readme_lines
- 212
Type safetyok1 item
- TypeScript strict type checking: ui/tsconfig.json
ui/tsconfig.json
- check:low_escape_density
- yes
- check:strict_config
- yes
- escapes
- 0
- escapes_per_kloc
- 0
Security
48 poor
Security posture is poor: 103 known vulnerabilities in 43 dependencies; 19 high-severity workflow issues. Weakest area: posture.
How the score is built
- Secrets100
- Static analysis (SAST)89
- Vulnerable dependencies2
- CI workflows3
- Security posture0
- OpenSSF Scorecardnot measured
Evidence by analyzer
OpenSSF Scorecardskipped
no published OpenSSF Scorecard result for this repo
Package registriesok
- checked
- 50
- declared
- 50
- lookup_errors
- 0
- missing
- 0
- recent
- 0
Secrets (gitleaks)ok
- secrets_current
- 0
- secrets_history
- 0
- secrets_low_confidence
- 0
- secrets_nonprod
- 0
Static analysis (opengrep)ok
- findings
- 75
- findings_high
- 0
- findings_low
- 75
- findings_medium
- 0
- parse_errors
- 2
- scanned_lines
- 55,638
- weighted_findings
- 18.75
Dependencies (osv-scanner)ok
- penalty
- 245
- vulnerabilities
- 103
- vulnerable_packages
- 43
- vulns_critical
- 6
- vulns_high
- 28
- vulns_low
- 9
- vulns_medium
- 48
- vulns_unknown
- 12
CI workflows (zizmor)ok
- findings
- 26
- findings_high
- 19
- findings_low
- 3
- findings_medium
- 4
- penalty
- 216
- workflows
- 2
Security postureok6 items
- app/src-tauri/Cargo.toml has no lockfile alongside it (unpinned dependencies)
app/src-tauri/Cargo.toml - crates/myna-audio/Cargo.toml has no lockfile alongside it (unpinned dependencies)
crates/myna-audio/Cargo.toml - crates/myna-coreaudio-tap/Cargo.toml has no lockfile alongside it (unpinned dependencies)
crates/myna-coreaudio-tap/Cargo.toml - crates/myna-llm/Cargo.toml has no lockfile alongside it (unpinned dependencies)
crates/myna-llm/Cargo.toml - crates/myna-stt/Cargo.toml has no lockfile alongside it (unpinned dependencies)
crates/myna-stt/Cargo.toml - crates/myna-wasapi-probe/Cargo.toml has no lockfile alongside it (unpinned dependencies)
crates/myna-wasapi-probe/Cargo.toml
- check:dependency_updates
- no
- check:lockfiles
- no
- check:security_policy
- no
- check:signed_commits
- no
- signed_commit_share
- 1.5%
- unpinned_manifests
- 6
Release downloadsok5 items
- release v0.6.3 ships Myna.app.tar.gz (1 downloads)
- release v0.6.3 ships Myna_0.6.3_aarch64.dmg (2 downloads)
- release v0.6.3 ships Myna_0.6.3_x64-setup.exe (0 downloads)
- release v0.6.3 ships Myna_0.6.3_x64_en-US.msi (0 downloads)
- release v0.6.2 ships Myna.app.tar.gz (2 downloads)
- binary_assets
- 24
- signals
- 1
- suspicious
- 0
Findings
6 critical47 high64 medium86 low3 info
206 findings
| Severity | Rule | Location | Message | Tool |
|---|---|---|---|---|
| critical | osv/GHSA-m665-v7pm-7grj |
Cargo.lock | [email protected] (crates.io) is affected by GHSA-m665-v7pm-7grj | Dependencies (osv-scanner) |
| critical | osv/RUSTSEC-2026-0369 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0369 | Dependencies (osv-scanner) |
| critical | osv/GHSA-5gmw-xhrv-c9v3 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-5gmw-xhrv-c9v3 | Dependencies (osv-scanner) |
| critical | osv/GHSA-67c8-pqhq-4rmx |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-67c8-pqhq-4rmx | Dependencies (osv-scanner) |
| critical | osv/GHSA-85c8-ppgw-ccpr |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-85c8-ppgw-ccpr | Dependencies (osv-scanner) |
| critical | osv/GHSA-jqcg-44mw-7w3h |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h | Dependencies (osv-scanner) |
| high | zizmor/unpinned-uses |
.github/workflows/ci.yml:23 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/ci.yml:26 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/ci.yml:29 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/ci.yml:69 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:151 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:160 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:169 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:179 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/excessive-permissions |
.github/workflows/release.yml:18 | overly broad permissions [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:198 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:201 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:207 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:222 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:35 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:38 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/cache-poisoning |
.github/workflows/release.yml:41 | runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:41 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/cache-poisoning |
.github/workflows/release.yml:46 | runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:46 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | osv/GHSA-q7v9-x93c-xqv3 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0429, GHSA-q7v9-x93c-xqv3 | Dependencies (osv-scanner) |
| high | osv/RUSTSEC-2026-0367 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0367 | Dependencies (osv-scanner) |
| high | osv/GHSA-7w5x-hrqm-74c2 |
package-lock.json | [email protected] (npm) is affected by GHSA-7w5x-hrqm-74c2 | Dependencies (osv-scanner) |
| high | osv/GHSA-gfr2-rv44-r23c |
package-lock.json | [email protected] (npm) is affected by GHSA-gfr2-rv44-r23c | Dependencies (osv-scanner) |
| high | osv/GHSA-r7fv-28h4-cvq7 |
package-lock.json | [email protected] (npm) is affected by GHSA-r7fv-28h4-cvq7 | Dependencies (osv-scanner) |
| high | osv/GHSA-22jm-h49p-29qw |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-22jm-h49p-29qw | Dependencies (osv-scanner) |
| high | osv/GHSA-27r3-jxmh-p828 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 | Dependencies (osv-scanner) |
| high | osv/GHSA-2883-xcg3-v3hh |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh | Dependencies (osv-scanner) |
| high | osv/GHSA-2m5v-pch6-74hx |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-2m5v-pch6-74hx | Dependencies (osv-scanner) |
| high | osv/GHSA-46jr-4wx8-v453 |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-46jr-4wx8-v453 | Dependencies (osv-scanner) |
| high | osv/GHSA-587h-7wmj-h5pm |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-587h-7wmj-h5pm | Dependencies (osv-scanner) |
| high | osv/GHSA-58mr-gqgx-xq4g |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-58mr-gqgx-xq4g | Dependencies (osv-scanner) |
| high | osv/GHSA-62vg-58rm-qff7 |
ui/package-lock.json | @angular/[email protected] (npm) is affected by GHSA-62vg-58rm-qff7 | Dependencies (osv-scanner) |
| high | osv/GHSA-68fv-2mgg-jv7q |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-68fv-2mgg-jv7q | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-6qxp-vccf-f47h |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-6qxp-vccf-f47h | Dependencies (osv-scanner) |
| high | osv/GHSA-f897-62hf-6gxq |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-f897-62hf-6gxq | Dependencies (osv-scanner) |
| high | osv/GHSA-ff3f-86qr-9cv3 |
ui/package-lock.json | @angular/[email protected] (npm) is affected by GHSA-ff3f-86qr-9cv3 | Dependencies (osv-scanner) |
| high | osv/GHSA-mrhx-c7xc-m3w5 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-mrhx-c7xc-m3w5 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qrxm-fqhp-jwvm |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-qrxm-fqhp-jwvm | Dependencies (osv-scanner) |
| high | osv/GHSA-qw65-cvwx-89v3 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-qw65-cvwx-89v3 | Dependencies (osv-scanner) |
| high | osv/GHSA-rfgv-xxqx-mfg5 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-rfgv-xxqx-mfg5 | Dependencies (osv-scanner) |
| high | osv/GHSA-xjj6-f33q-929c |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-xjj6-f33q-929c | Dependencies (osv-scanner) |
| medium | zizmor/artipacked |
.github/workflows/ci.yml:22 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/ci.yml:68 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:197 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:34 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | osv/GHSA-2mjx-qc3c-rqvc |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0285, GHSA-2mjx-qc3c-rqvc | Dependencies (osv-scanner) |
| medium | osv/GHSA-8hxf-qr8p-62x4 |
Cargo.lock | [email protected] (crates.io) is affected by GHSA-8hxf-qr8p-62x4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-c8m5-c952-6cm4 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0346, GHSA-c8m5-c952-6cm4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-wrw7-89jp-8q8g |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2024-0429, GHSA-wrw7-89jp-8q8g | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2024-0370 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2024-0370 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2025-0075 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2025-0075 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2025-0080 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2025-0080 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2025-0081 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2025-0081 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2025-0098 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2025-0098 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2025-0100 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2025-0100 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0368 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0368 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0381 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0381 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0382 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0382 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0383 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0383 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0386 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0386 | Dependencies (osv-scanner) |
| medium | osv/RUSTSEC-2026-0486 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0486 | Dependencies (osv-scanner) |
| medium | osv/GHSA-253c-mchw-3w2r |
package-lock.json | [email protected] (npm) is affected by GHSA-253c-mchw-3w2r | Dependencies (osv-scanner) |
| medium | osv/GHSA-r3ph-w7gj-g6xm |
package-lock.json | [email protected] (npm) is affected by GHSA-r3ph-w7gj-g6xm | Dependencies (osv-scanner) |
| medium | osv/GHSA-r4xh-jqrq-34v2 |
package-lock.json | [email protected] (npm) is affected by GHSA-r4xh-jqrq-34v2 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2vr4-cq9g-pvrc |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-2vr4-cq9g-pvrc | Dependencies (osv-scanner) |
| medium | osv/GHSA-3g3m-2fjr-6pw4 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-3g3m-2fjr-6pw4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3wwx-pv8p-q78v |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-3wwx-pv8p-q78v | Dependencies (osv-scanner) |
| medium | osv/GHSA-46wx-v44x-9hh2 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-46wx-v44x-9hh2 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4h7h-rv7c-7m2v |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-4h7h-rv7c-7m2v | Dependencies (osv-scanner) |
| medium | osv/GHSA-4m76-xfj5-7975 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-4m76-xfj5-7975 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4mjr-xmp4-gh2g |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g | Dependencies (osv-scanner) |
| medium | osv/GHSA-4qv8-2p9j-2685 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-4qv8-2p9j-2685 | Dependencies (osv-scanner) |
| medium | osv/GHSA-5r4p-p66f-jhc7 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-5r4p-p66f-jhc7 | Dependencies (osv-scanner) |
| medium | osv/GHSA-698v-4r3x-3vcv |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-698v-4r3x-3vcv | Dependencies (osv-scanner) |
| medium | osv/GHSA-6pq8-jhm2-2vcw |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-6pq8-jhm2-2vcw | Dependencies (osv-scanner) |
| medium | osv/GHSA-6prh-2h8m-c8cw |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-6prh-2h8m-c8cw | Dependencies (osv-scanner) |
| medium | osv/GHSA-82fw-gwwq-j7x9 |
ui/package-lock.json | @vitest/[email protected] (npm) is affected by GHSA-82fw-gwwq-j7x9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-82fw-gwwq-j7x9 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-82fw-gwwq-j7x9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-9fm3-97px-rjf6 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-9fm3-97px-rjf6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-crvj-82cr-hjcx |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-crvj-82cr-hjcx | Dependencies (osv-scanner) |
| medium | osv/GHSA-g3hv-75wg-m249 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-g3hv-75wg-m249 | Dependencies (osv-scanner) |
| medium | osv/GHSA-g3hv-75wg-m249 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-g3hv-75wg-m249 | Dependencies (osv-scanner) |
| medium | osv/GHSA-g6gw-c38x-mqfc |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-g6gw-c38x-mqfc | Dependencies (osv-scanner) |
| medium | osv/GHSA-gqvv-2mrq-wpjv |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-gqvv-2mrq-wpjv | Dependencies (osv-scanner) |
| medium | osv/GHSA-h3mg-xc3c-68pw |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-h3mg-xc3c-68pw | Dependencies (osv-scanner) |
| medium | osv/GHSA-h7mg-cq63-vhpq |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-h7mg-cq63-vhpq | Dependencies (osv-scanner) |
| medium | osv/GHSA-hrr3-gc8f-f4qj |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-hrr3-gc8f-f4qj | Dependencies (osv-scanner) |
| medium | osv/GHSA-hxh3-vqpv-xpqv |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-hxh3-vqpv-xpqv | Dependencies (osv-scanner) |
| medium | osv/GHSA-j6r3-76f7-8jcv |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-j6r3-76f7-8jcv | Dependencies (osv-scanner) |
| medium | osv/GHSA-jfgx-762w-99vr |
ui/package-lock.json | @angular/[email protected] (npm) is affected by GHSA-jfgx-762w-99vr | Dependencies (osv-scanner) |
| medium | osv/GHSA-jpvv-r467-5p4w |
ui/package-lock.json | @hono/[email protected] (npm) is affected by GHSA-jpvv-r467-5p4w | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-qv5m-9pm6-hqp3 |
ui/package-lock.json | @hono/[email protected] (npm) is affected by GHSA-qv5m-9pm6-hqp3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-qxg6-89mg-rqv8 |
ui/package-lock.json | @vitest/[email protected] (npm) is affected by GHSA-qxg6-89mg-rqv8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-r825-w8mm-5pxw |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-r825-w8mm-5pxw | Dependencies (osv-scanner) |
| medium | osv/GHSA-rmxm-3fg6-px4f |
ui/package-lock.json | @hono/[email protected] (npm) is affected by GHSA-rmxm-3fg6-px4f | Dependencies (osv-scanner) |
| medium | osv/GHSA-rpw4-54j3-4h4q |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-rpw4-54j3-4h4q | Dependencies (osv-scanner) |
| medium | osv/GHSA-rq7h-c2jc-7f22 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-rq7h-c2jc-7f22 | Dependencies (osv-scanner) |
| medium | osv/GHSA-rvq5-wwqv-78pq |
ui/package-lock.json | @modelcontextprotocol/[email protected] (npm) is affected by GHSA-rvq5-wwqv-78pq | Dependencies (osv-scanner) |
| medium | osv/GHSA-rxp7-6hxx-x8q5 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-rxp7-6hxx-x8q5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-w74x-v6f9-j3xg |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-w74x-v6f9-j3xg | Dependencies (osv-scanner) |
| medium | osv/GHSA-wjr9-j795-jxcr |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-wjr9-j795-jxcr | Dependencies (osv-scanner) |
| medium | osv/GHSA-x5fp-wj9c-mxmx |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-x5fp-wj9c-mxmx | Dependencies (osv-scanner) |
| low | opengrep/javascript.lang.correctness.useless-assignment |
ui/src/app/modules/meetings/presentation/components/editable-segment/editable-segment.component.ts:95 | `el.style.height` is assigned twice; the first assignment is useless | Lint |
| low | opengrep/javascript.lang.correctness.useless-assignment |
ui/src/app/modules/meetings/presentation/components/summary-panel/summary-panel.component.ts:235 | `el.style.height` is assigned twice; the first assignment is useless | Lint |
| low | osv/GHSA-h2v8-394m-p7vv |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0348, GHSA-h2v8-394m-p7vv | Dependencies (osv-scanner) |
| low | osv/GHSA-w44r-93j7-qv28 |
Cargo.lock | [email protected] (crates.io) is affected by RUSTSEC-2026-0349, GHSA-w44r-93j7-qv28 | Dependencies (osv-scanner) |
| low | opengrep/rust.lang.security.current-exe |
app/src-tauri/src/commands/update_install.rs:239 | current_exe should not be used for security operations. From the docs: "The output of this function should not be trusted for anything that might have security implications. Basically, if users can run the executable, they can change... | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.args |
app/src-tauri/src/commands/update_install.rs:242 | args should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be relied... | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/process.rs:246 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/process.rs:277 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/process.rs:296 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/process.rs:84 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:123 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:145 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:150 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:178 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:189 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:197 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:229 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:237 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:243 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:255 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:276 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:306 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:394 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:429 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:488 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:492 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:502 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:506 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-coreaudio-tap/src/tap.rs:618 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.args-os |
crates/myna-stt/src/main.rs:14 | args_os should not be used for security operations. From the docs: "The first element is traditionally the path of the executable, but it can be set to arbitrary text, and might not even exist. This means this property should not be... | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:103 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:128 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:134 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:135 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:146 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:152 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:153 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:154 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:155 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:246 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:248 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:250 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:252 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:257 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:259 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:269 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:280 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:311 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:315 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:322 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:336 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:348 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:356 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:364 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:376 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:397 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:401 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:72 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/lib.rs:88 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:101 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:124 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:128 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:129 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:130 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:131 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:132 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:141 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:151 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:158 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:159 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:161 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:175 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:189 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:204 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:210 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:216 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:223 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:52 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | opengrep/rust.lang.security.unsafe-usage |
crates/myna-wasapi-probe/src/main.rs:86 | Detected 'unsafe' usage, please audit for secure usage [confidence high] | Static analysis (opengrep) |
| low | osv/GHSA-238p-pmpm-9mq7 |
package-lock.json | [email protected] (npm) is affected by GHSA-238p-pmpm-9mq7 | Dependencies (osv-scanner) |
| low | osv/GHSA-vfgh-jcmw-g37q |
package-lock.json | [email protected] (npm) is affected by GHSA-vfgh-jcmw-g37q | Dependencies (osv-scanner) |
| low | osv/GHSA-333x-w4r6-6crp |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-333x-w4r6-6crp | Dependencies (osv-scanner) |
| low | osv/GHSA-3gg2-335m-rxc6 |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-3gg2-335m-rxc6 | Dependencies (osv-scanner) |
| low | osv/GHSA-9jrq-w75r-8gcw |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-9jrq-w75r-8gcw | Dependencies (osv-scanner) |
| low | osv/GHSA-r53p-7pc4-xj5r |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-r53p-7pc4-xj5r | Dependencies (osv-scanner) |
| low | osv/GHSA-xhq7-xmqj-769h |
ui/package-lock.json | [email protected] (npm) is affected by GHSA-xhq7-xmqj-769h | Dependencies (osv-scanner) |
| info | zizmor/superfluous-actions |
.github/workflows/release.yml:169 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
| info | zizmor/superfluous-actions |
.github/workflows/release.yml:179 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
| info | zizmor/superfluous-actions |
.github/workflows/release.yml:222 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
Tools and coverage
Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.
| Analyzer | Pillar | Status | Version | Findings | Note |
|---|---|---|---|---|---|
| AI tool configuration | AI provenance | ok | signatures-v1 | 0 | |
| Explicit AI attribution | AI provenance | ok | signatures-v1 | 0 | |
| Release velocity | AI provenance | ok | prov-4 | 0 | |
| Coding style | AI provenance | ok | — | 0 | |
| Commit velocity | AI provenance | ok | prov-4 | 0 | |
| Findings in AI-written lines | AI provenance | ok | git-blame | 0 | |
| Complexity (lizard) | Code quality | ok | lizard 1.25.1 | 0 | |
| Documentation | Code quality | ok | — | 0 | |
| Duplication (jscpd) | Code quality | ok | repotrust-dup-w6 | 0 | |
| Lint | Code quality | ok | opengrep 1.33.1; rules f1d2b562b414 | 2 | |
| Tests and CI | Code quality | ok | — | 0 | |
| Type safety | Code quality | ok | — | 0 | |
| CI workflows (zizmor) | Security | ok | zizmor 1.32.0 | 26 | |
| Dependencies (osv-scanner) | Security | ok | osv-scanner version: 2.7.1 | 103 | |
| Release downloads | Security | ok | — | 0 | |
| Security posture | Security | ok | — | 0 | |
| Package registries | Security | ok | — | 0 | |
| Static analysis (opengrep) | Security | ok | opengrep 1.33.1; rules f1d2b562b414 | 75 | |
| OpenSSF Scorecard | Security | skipped | — | 0 | no published OpenSSF Scorecard result for this repo |
| Secrets (gitleaks) | Security | ok | gitleaks 8.30.1 | 0 |
Score history
Scores from different scoring versions aren't directly comparable.
| Scored | Commit | Scoring | AI provenance | Quality | Security |
|---|---|---|---|---|---|
| 2026-11-14 | 7356f23c8815 | prov-5+qual-2+sec-2 | 1% | 90 | 48 |
| 2026-11-14 | 7356f23c8815 | prov-4+qual-2+sec-2 | 1% | 90 | 48 |
Full text report
- Repository: https://github.com/fmflurry/myna
- Commit:
7356f23c8815c526a2ce706aa798ec1975bf16f3 - Generated: 2026-11-14T14:52:04+00:00
- Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 1 | possible | 65% | 100% |
| Code quality | 90 | strong | 90% | 100% |
| Security | 48 | poor | 85% | 100% |
AI provenance
Weak signals consistent with AI-assisted development. 2 commit(s) carry explicit AI attribution, too few to characterize the codebase.
- Explicitly attributed share (lower bound): 0.9%
- Unattributed share in AI-consistent velocity bursts: 43.8%
- Estimated AI-generated share: 0.9%
| AI tool | Attributed commits | Lines added |
|---|---|---|
| Cursor agent | 2 | 956 |
- AI tooling configured in repo: claude-code
Current source lines last changed by AI-attributed commits: 953 of 56,404.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Quality | 0.0 | 0.036 | 0.0x |
| Security | 0.0 | 1.353 | 0.0x |
- Stylometry index: 0.12 per 1,000 lines (narrated steps 3, placeholders 0, assistant phrasing 0, emoji 7). Reported as a signal, not scored.
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2026-08 | 57,926 | 0% |
| 2026-09 | 48,684 | 0% |
| 2026-10 | 23 | 0% |
| 2026-11 | 956 | 100% |
Evidence
- Cursor agent: trailer 'Co-authored-by: Cursor Agent' (7356f23c8815)
- Cursor agent: trailer 'Co-authored-by: Cursor Agent' (cedfaf349928)
- 12,040 lines of first-party code in ~4.0h (2,993 lines/hour, 11 commit session) (a3eca80a1e74)
- 9,879 lines of first-party code in ~4.0h (2,466 lines/hour, 6 commit session) (0d1a16a9fbf3)
- 7,410 lines of first-party code in ~4.2h (1,779 lines/hour, 13 commit session) (97659c82bd9f)
- .claude/settings.json (claude-code configuration) (.claude/sett)
- CLAUDE.md (claude-code configuration) (CLAUDE.md)
- 1,380 lines of first-party code in ~0.9h (1,518 lines/hour, 3 commit session) (6c29c35aa5f9)
- v0.1.0 → v0.2.0: 6,279 lines in 0.68 days (9,265.5 lines/day) (v0.1.0...v0.)
- 2,094 lines of first-party code in ~2.0h (1,038 lines/hour, 1 commit session) (88aee17dfc0e)
- 3,298 lines of first-party code in ~3.4h (974 lines/hour, 8 commit session) (24536b4ebf3d)
- 3,733 lines of first-party code in ~4.0h (933 lines/hour, 1 commit session) (6675a2945bdb)
- 1,899 lines of first-party code in ~2.4h (778 lines/hour, 1 commit session) (8267bb1c3bc8)
- 3,010 lines of first-party code in ~4.0h (752 lines/hour, 1 commit session) (b2b26ebd893e)
- 2,347 lines of first-party code in ~4.0h (587 lines/hour, 1 commit session) (ca1e87244a22)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is strong: test-to-source ratio 0.84, CI runs tests; 8% of function code in complex or long functions; 4% duplicated lines. Weakest area: duplication.
| Area | Score |
|---|---|
| Complexity (lizard) | 79 |
| Duplication | 78 |
| Code smells (Opengrep) | 100 |
| Tests and CI | 100 |
| Documentation | 85 |
| Type safety | 100 |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 2,969; mean complexity 2.0, 90th percentile 4; 6 complex and 5 long functions
- Duplicated lines: 4.2% of 41,172 compared
- Tests: 47,127 test lines for 56,404 source lines (ratio 0.84); CI test commands: go test, cargo test; 64% of recent source commits also change tests
- Docs missing or thin: contributing
Most complex functions:
- wav_duration_sec in app/src-tauri/src/commands/meetings.rs: complexity 23, 49 lines
- run_retranscribe in app/src-tauri/src/commands/import.rs: complexity 19, 99 lines
- validate_judge_output in app/src-tauri/src/diarize_judge.rs: complexity 19, 75 lines
- attach_system_audio_to_ring in crates/myna-audio/src/capture.rs: complexity 19, 81 lines
- migrate_data_root_with_test_options in app/src-tauri/src/commands/storage.rs: complexity 18, 43 lines
Security
Security posture is poor: 103 known vulnerabilities in 43 dependencies; 19 high-severity workflow issues. Weakest area: posture.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 100 |
| Static analysis (Opengrep) | 89 |
| Vulnerable dependencies (OSV) | 2 |
| CI workflows (zizmor) | 3 |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
-
Known vulnerabilities: 103 in 43 packages (critical 6, high 28, medium 48, low 9)
-
Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles
Top findings
| Severity | Finding | Location |
|---|---|---|
| critical | osv/RUSTSEC-2026-0369: [email protected] (crates.io) is affected by RUSTSEC-2026-0369 |
Cargo.lock |
| critical | osv/GHSA-m665-v7pm-7grj: [email protected] (crates.io) is affected by GHSA-m665-v7pm-7grj |
Cargo.lock |
| critical | osv/GHSA-67c8-pqhq-4rmx: [email protected] (npm) is affected by GHSA-67c8-pqhq-4rmx |
ui/package-lock.json |
| critical | osv/GHSA-jqcg-44mw-7w3h: [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h |
ui/package-lock.json |
| critical | osv/GHSA-5gmw-xhrv-c9v3: [email protected] (npm) is affected by GHSA-5gmw-xhrv-c9v3 |
ui/package-lock.json |
| critical | osv/GHSA-85c8-ppgw-ccpr: [email protected] (npm) is affected by GHSA-85c8-ppgw-ccpr |
ui/package-lock.json |
| high | osv/RUSTSEC-2026-0367: [email protected] (crates.io) is affected by RUSTSEC-2026-0367 |
Cargo.lock |
| high | osv/GHSA-q7v9-x93c-xqv3: [email protected] (crates.io) is affected by RUSTSEC-2026-0429, GHSA-q7v9-x93c-xqv3 |
Cargo.lock |
| high | osv/GHSA-gfr2-rv44-r23c: [email protected] (npm) is affected by GHSA-gfr2-rv44-r23c |
package-lock.json |
| high | osv/GHSA-r7fv-28h4-cvq7: [email protected] (npm) is affected by GHSA-r7fv-28h4-cvq7 |
package-lock.json |
| high | osv/GHSA-7w5x-hrqm-74c2: [email protected] (npm) is affected by GHSA-7w5x-hrqm-74c2 |
package-lock.json |
| high | osv/GHSA-62vg-58rm-qff7: @angular/[email protected] (npm) is affected by GHSA-62vg-58rm-qff7 |
ui/package-lock.json |
| high | osv/GHSA-ff3f-86qr-9cv3: @angular/[email protected] (npm) is affected by GHSA-ff3f-86qr-9cv3 |
ui/package-lock.json |
| high | osv/GHSA-22jm-h49p-29qw: @modelcontextprotocol/[email protected] (npm) is affected by GHSA-22jm-h49p-29qw |
ui/package-lock.json |
| high | osv/GHSA-46jr-4wx8-v453: @modelcontextprotocol/[email protected] (npm) is affected by GHSA-46jr-4wx8-v453 |
ui/package-lock.json |
| high | osv/GHSA-6qxp-vccf-f47h: @modelcontextprotocol/[email protected] (npm) is affected by GHSA-6qxp-vccf-f47h |
ui/package-lock.json |
| high | osv/GHSA-f897-62hf-6gxq: @modelcontextprotocol/[email protected] (npm) is affected by GHSA-f897-62hf-6gxq |
ui/package-lock.json |
| high | osv/GHSA-27r3-jxmh-p828: [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 |
ui/package-lock.json |
| high | osv/GHSA-6j4f-fj2g-mc7p: [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json |
| high | osv/GHSA-qhr7-859c-m2p7: [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 |
ui/package-lock.json |
| high | osv/GHSA-6j4f-fj2g-mc7p: [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json |
| high | osv/GHSA-qhr7-859c-m2p7: [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 |
ui/package-lock.json |
| high | osv/GHSA-6j4f-fj2g-mc7p: [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p |
ui/package-lock.json |
| high | osv/GHSA-qhr7-859c-m2p7: [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 |
ui/package-lock.json |
| high | osv/GHSA-58mr-gqgx-xq4g: [email protected] (npm) is affected by GHSA-58mr-gqgx-xq4g |
ui/package-lock.json |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Distribution signals
- binary-release-asset: release v0.6.3 ships Myna.app.tar.gz (1 downloads)
- binary-release-asset: release v0.6.3 ships Myna_0.6.3_aarch64.dmg (2 downloads)
- binary-release-asset: release v0.6.3 ships Myna_0.6.3_x64-setup.exe (0 downloads)
- binary-release-asset: release v0.6.3 ships Myna_0.6.3_x64_en-US.msi (0 downloads)
- binary-release-asset: release v0.6.2 ships Myna.app.tar.gz (2 downloads)
Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.
Repository profile
- Source lines: 56,404; test lines: 47,127
| Language | Lines |
|---|---|
| Rust | 51,719 |
| TypeScript | 49,220 |
| Shell | 1,781 |
| PowerShell | 766 |
| JavaScript | 45 |