greggh/claude-code.nvim

Seamless integration between Claude Code AI assistant and Neovim

https://github.com/greggh/claude-code.nvim · commit 55c0cb59828f · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/greggh/claude-code.nvim
Commit: 55c0cb59828fbc3bec744288286a46f5d5750b83
Generated: 2026-11-13T23:43:13+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	70	explicit	95%	100%
Code quality	84	strong	90%	100%
Security	70	adequate	85%	100%

AI provenance

Explicit AI attribution on 70% of first-party code added; an estimated 70% including velocity signals.

Explicitly attributed share (lower bound): 70.2%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 70.2%

AI tool	Attributed commits	Lines added
Claude Code	73	5,255
OpenHands	1	0

AI tooling configured in repo: claude-code

Current source lines last changed by AI-attributed commits: 2,242 of 2,539.

Too few lines in one group to compare finding densities.

Stylometry index: 5.51 per 1,000 lines (narrated steps 4, placeholders 0, assistant phrasing 0, emoji 20). Reported as a signal, not scored.

Month	Lines added	Attributed to AI
2025-02	2,383	69%
2025-03	2,541	60%
2025-05	1,797	78%
2025-06	742	91%
2026-02	28	0%

Evidence

Claude Code: on merged branch (c9a31e5106) (1952ba258615)
Claude Code: on merged branch (c9a31e5106) (1617a92b1224)
Claude Code: on merged branch (c9a31e5106) (ed9c728a381b)
Claude Code: on merged branch (c9a31e5106) (3f8839dcea76)
Claude Code: on merged branch (c9a31e5106) (c2af084756c1)
Claude Code: on merged branch (c9a31e5106) (d1601c64cd61)
Claude Code: on merged branch (c9a31e5106) (12fa63f15e07)
Claude Code: on merged branch (c9a31e5106) (780ca1b489fd)
Claude Code: on merged branch (c9a31e5106) (22dcdffa60d2)
Claude Code: on merged branch (275c47615f) (da466772cb44)
Claude Code: on merged branch (275c47615f) (d3693c1210ba)
OpenHands: author openhands (ffdf35d85665)
Claude Code: on merged branch (c9a31e5106) (891e47370a46)
Claude Code: on merged branch (c9a31e5106) (e60039fd2f4e)
Claude Code: on merged branch (c9a31e5106) (69eeaaf46f19)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is strong: test-to-source ratio 0.87, no CI test run detected; 5% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	87
Duplication	88
Code smells (Opengrep)	88
Tests and CI	70
Documentation	100
Type safety	n/a
Process (Scorecard review/maintenance)	n/a

Functions: 65; mean complexity 4.8, 90th percentile 11; 1 complex and 0 long functions
Duplicated lines: 2.1% of 1,831 compared
Tests: 2,201 test lines for 2,539 source lines (ratio 0.87); CI test commands: none detected; 39% of recent source commits also change tests
Docs missing or thin: none

Most complex functions:

validate_float_config in lua/claude-code/config.lua: complexity 28, 53 lines

Security

Security posture is adequate: 23 high-severity workflow issues. Weakest area: ci actions.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	100
Vulnerable dependencies (OSV)	n/a
CI workflows (zizmor)	1
Posture (policy, updates, signing, lockfiles)	40
OpenSSF Scorecard	n/a

Posture checks passed: security policy, lockfiles; missing: dependency updates, signed commits

Top findings

Severity	Finding	Location
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/ci.yml:19
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/ci.yml:22
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/ci.yml:33
high	`zizmor/excessive-permissions`: overly broad permissions [confidence high]	.github/workflows/dependency-updates.yml:13
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:19
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:46
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:54
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:94
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:102
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:125
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:135
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:138
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:143
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:148
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/dependency-updates.yml:171
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:30
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:37
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:62
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:113
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:115
high	`zizmor/template-injection`: code injection via template expansion [confidence high]	.github/workflows/release.yml:121
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/release.yml:23
high	`zizmor/unpinned-uses`: unpinned action reference [confidence high]	.github/workflows/release.yml:125
medium	`zizmor/artipacked`: credential persistence through GitHub Actions artifacts [confidence low]	.github/workflows/ci.yml:19
medium	`zizmor/excessive-permissions`: overly broad permissions [confidence medium]	.github/workflows/ci.yml:10

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 2,539; test lines: 2,201

Language	Lines
Lua	4,176
Shell	564

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/greggh/claude-code.nvim/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/greggh/claude-code.nvim/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/greggh/claude-code.nvim/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/greggh/claude-code.nvim/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/greggh/claude-code.nvim/security.svg)](https://repotrust.synapticcyber.com/r/github.com/greggh/claude-code.nvim/)