ganlvtech/down_52pojie_cn

A single page file explorer that can be hosted on static website. 吾爱破解论坛爱盘 https://down.52pojie.cn/ 页面的源代码

https://github.com/ganlvtech/down_52pojie_cn · commit 7e0e51ef8847 · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/ganlvtech/down_52pojie_cn
Commit: 7e0e51ef88477a31d1537c3231de9a3cca9028c8
Generated: 2026-11-13T23:32:48+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	none-detected	55%	100%
Code quality	64	weak	90%	100%
Security	57	weak	85%	100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%

Month	Lines added	Attributed to AI
2018-09	1,220	0%
2018-10	863	0%
2018-11	39	0%
2019-05	35	0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 3% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	100
Duplication	83
Code smells (Opengrep)	77
Tests and CI	15
Documentation	65
Type safety	n/a
Process (Scorecard review/maintenance)	n/a

Functions: 96; mean complexity 1.9, 90th percentile 4; 0 complex and 0 long functions
Duplicated lines: 3.1% of 906 compared
Tests: 0 test lines for 1,420 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
Docs missing or thin: contributing, changelog

Security

Security posture is weak: 311 known vulnerabilities in 118 dependencies. Weakest area: dependencies.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	88
Vulnerable dependencies (OSV)	0
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	n/a

Known vulnerabilities: 311 in 118 packages (critical 28, high 140, medium 115, low 19)
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity	Finding	Location
critical	`osv/GHSA-67hx-6x53-jw92`: @babel/[email protected] (npm) is affected by GHSA-67hx-6x53-jw92	package-lock.json
critical	`osv/GHSA-cpq7-6gpm-g9rc`: [email protected] (npm) is affected by GHSA-cpq7-6gpm-g9rc	package-lock.json
critical	`osv/GHSA-phwq-j96m-2c2q`: [email protected] (npm) is affected by GHSA-phwq-j96m-2c2q	package-lock.json
critical	`osv/GHSA-vjh7-7g9h-fjfh`: [email protected] (npm) is affected by GHSA-vjh7-7g9h-fjfh	package-lock.json
critical	`osv/GHSA-6h5x-7c5m-7cr7`: [email protected] (npm) is affected by GHSA-6h5x-7c5m-7cr7	package-lock.json
critical	`osv/GHSA-fjxv-7rqg-78g4`: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4	package-lock.json
critical	`osv/GHSA-8r6j-v8pm-fqw3`: [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3	package-lock.json
critical	`osv/GHSA-896r-f27r-55mw`: [email protected] (npm) is affected by GHSA-896r-f27r-55mw	package-lock.json
critical	`osv/GHSA-76p3-8jx3-jpfq`: [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq	package-lock.json
critical	`osv/GHSA-76p3-8jx3-jpfq`: [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq	package-lock.json
critical	`osv/GHSA-jf85-cpcp-j695`: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695	package-lock.json
critical	`osv/GHSA-jf85-cpcp-j695`: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695	package-lock.json
critical	`osv/GHSA-xvch-5gv4-984h`: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h	package-lock.json
critical	`osv/GHSA-xvch-5gv4-984h`: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h	package-lock.json
critical	`osv/GHSA-fhjf-83wg-r2j9`: [email protected] (npm) is affected by GHSA-fhjf-83wg-r2j9	package-lock.json
critical	`osv/GHSA-92xj-mqp7-vmcj`: [email protected] (npm) is affected by GHSA-92xj-mqp7-vmcj	package-lock.json
critical	`osv/GHSA-h7cp-r72f-jxh6`: [email protected] (npm) is affected by GHSA-h7cp-r72f-jxh6	package-lock.json
critical	`osv/GHSA-v62p-rq8g-8h59`: [email protected] (npm) is affected by GHSA-v62p-rq8g-8h59	package-lock.json
critical	`osv/GHSA-jqcg-44mw-7w3h`: [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h	package-lock.json
critical	`osv/GHSA-4g88-fppr-53pp`: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp	package-lock.json
critical	`osv/GHSA-4g88-fppr-53pp`: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp	package-lock.json
critical	`osv/GHSA-95m3-7q98-8xr5`: [email protected] (npm) is affected by GHSA-95m3-7q98-8xr5	package-lock.json
critical	`osv/GHSA-w7jw-789q-3m8p`: [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p	package-lock.json
critical	`osv/GHSA-23hp-3jrh-7fpw`: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw	package-lock.json
critical	`osv/GHSA-23hp-3jrh-7fpw`: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw	package-lock.json

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

binary-release-asset: release v2.1.3 ships dist.zip (7273 downloads)
binary-release-asset: release v2.1.2 ships dist.zip (1160 downloads)
binary-release-asset: release v2.1.1 ships dist.zip (175 downloads)
binary-release-asset: release v2.1 ships dist.zip (68 downloads)
binary-release-asset: release 2.0 ships dist.zip (99 downloads)

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

Source lines: 1,420; test lines: 0

Language	Lines
PHP	598
Vue	433
JavaScript	389

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/ganlvtech/down_52pojie_cn/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/ganlvtech/down_52pojie_cn/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/ganlvtech/down_52pojie_cn/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/ganlvtech/down_52pojie_cn/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/ganlvtech/down_52pojie_cn/security.svg)](https://repotrust.synapticcyber.com/r/github.com/ganlvtech/down_52pojie_cn/)