hibukki/whatsapp_history3

• Repository: https://github.com/hibukki/whatsapp_history3
• Commit: 70c5107da723fef66899da2cb8853eb60a52cc4c
• Generated: 2026-11-14T14:52:05+00:00
• Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence).

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 30.1%

• Estimated AI-generated share: 0.0%

• Stylometry index: 3.60 per 1,000 lines (narrated steps 0, placeholders 1, assistant phrasing 0, emoji 12). Reported as a signal, not scored.

Evidence

• 1,190 lines of first-party code in ~2.0h (603 lines/hour, 9 commit session) (358a79cb4208)
• placeholder or demo-only phrasing: // TODO: Replace with your actual Firebase project configuration (src/firebase)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.01, no CI test run detected; 25% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing.

• Functions: 125; mean complexity 2.8, 90th percentile 6; 4 complex and 1 long functions
• Duplicated lines: 2.4% of 1,615 compared
• Tests: 25 test lines for 2,220 source lines (ratio 0.01); CI test commands: none detected; 4% of recent source commits also change tests
• Docs missing or thin: license, contributing, changelog

Most complex functions:

• ChatListPage in src/App.tsx: complexity 33, 205 lines
• extract_zip in functions/main.py: complexity 19, 81 lines
• extractChatAndAttachmentsFromZip in src/localStorageUtils.ts: complexity 17, 46 lines
• ChatViewPage in src/App.tsx: complexity 16, 56 lines

Security

Security posture is poor: 1 possible secret(s) in the tree, 0 only in history; 192 known vulnerabilities in 49 dependencies. Weakest area: posture.

• Known vulnerabilities: 192 in 49 packages (critical 9, high 94, medium 73, low 16)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 2,220; test lines: 25