huamidev/GestaltX

• Repository: https://github.com/huamidev/GestaltX
• Commit: d1d5473734440e8f2e797494ac373427c02fd674
• Generated: 2026-11-13T22:32:56+00:00
• Scorer 0.1.0, scoring prov-3+qual-1+sec-1, report schema v2

Scores

Unusual traction: many stars in a few days on a newly created account, which is consistent with purchased or automated stars. Star count is not a reliable signal for this repository.

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%
• Unattributed share in AI-consistent velocity bursts: 61.0%
• Estimated AI-generated share: 0.0%

Evidence

• 1,089 lines of first-party code in ~0.8h (1,372 lines/hour, 1 commit session) (601be665cf31)
• 5,721 lines of first-party code in ~4.3h (1,334 lines/hour, 2 commit session) (683649f2fc23)
• v1.0.7 → v1.0.9: 7,948 lines in 0.96 days (8,264.1 lines/day) (v1.0.7...v1.)
• 3,709 lines of first-party code in ~4.0h (927 lines/hour, 1 commit session) (72f467548209)
• 2,215 lines of first-party code in ~4.3h (515 lines/hour, 27 commit session) (e5ceea5f6c6e)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.43, no CI test run detected; 21% of function code in complex or long functions; 3% duplicated lines. Weakest area: type safety.

• Functions: 805; mean complexity 4.9, 90th percentile 11; 37 complex and 2 long functions
• Duplicated lines: 2.8% of 10,896 compared
• Tests: 5,915 test lines for 13,873 source lines (ratio 0.43); CI test commands: none detected; 70% of recent source commits also change tests
• Docs missing or thin: contributing

Most complex functions:

• decode: in GestaltX/GXLaunchServicesParser.m: complexity 83, 93 lines
• launchApplicationInventory: in GestaltX/GXCustomizationAccess.m: complexity 67, 86 lines
• scan in GestaltX/MobileGestaltCacheLayout.swift: complexity 54, 72 lines
• launchApplications in GestaltX/GXCustomizationAccess.m: complexity 47, 66 lines
• body in GestaltX/ContentView.swift: complexity 45, 182 lines

Security

Security posture is adequate: 1 known vulnerabilities in 1 dependencies; 5 high-severity workflow issues. Weakest area: posture.

• Known vulnerabilities: 1 in 1 packages (critical 0, high 0, medium 1, low 0)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

• binary-release-asset: release v1.1.1 ships GestaltX_1.1.1.ipa (1343 downloads)
• binary-release-asset: release v1.0.7 ships GestaltX_1.0.7.ipa (6434 downloads)
• binary-release-asset: release v1.0.6 ships GestaltX-1.0.6.zip (525 downloads)
• binary-release-asset: release v1.0.5 ships GestaltX_1.0.5.ipa (12928 downloads)
• binary-release-asset: release v1.0.4 ships GestaltX_1.0.4.ipa (13396 downloads)
• star-burst: 7285 stars in 5 days (1543/day)
• new-owner: owner account is 5 days old with 7285 stars on this repo

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

• Source lines: 13,873; test lines: 5,915

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/huamidev/GestaltX/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/huamidev/GestaltX/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/huamidev/GestaltX/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/huamidev/GestaltX/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/huamidev/GestaltX/security.svg)](https://repotrust.synapticcyber.com/r/github.com/huamidev/GestaltX/)