RepoTrust

Leaderboard github.com

jamiebuilds/spectacle-code-slide

:metal: Present code with style

  • View repository ↗
  • JavaScript
  • ★ 4,124
  • commit 978dffec405d
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
52%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

66/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

59/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON RepoTrust ai badgeRepoTrust quality badgeRepoTrust security badge

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pace0
  • Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

  1. 2016-03345 · 0% AI
  2. 2016-040 · 0% AI
  3. 2016-08114 · 0% AI
  4. 2016-091 · 0% AI
  5. 2016-1013 · 0% AI
  6. 2017-020 · 0% AI
  7. 2017-040 · 0% AI
  8. 2017-103 · 0% AI
  9. 2017-115 · 0% AI
  10. 2018-010 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
48
effective_loc
481
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
54.37
measured_loc
481
median_loc_per_hour
54.37
pr_timed_units
5
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
481
work_units
15
Release velocityok
flagged_releases
0
max_loc_per_day
600
releases
12
Coding styleok
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
0
files:placeholder
0
index
0
lines_scanned
391
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

66 adequate

Code quality is adequate: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity100
  • Duplication100
  • Lint and smells100
  • Tests and CI0
  • Documentation65
  • Type safetynot measured
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok
complex_functions
0
function_nloc
217
functions
35
long_functions
0
many_param_functions
0
mean_ccn
1.86
p90_ccn
4
risky_nloc_share
0.0%
Duplication (jscpd)ok
compared_lines
248
duplicated_lines
0
duplicated_share
0.0%
files
9
Lintok
findings
0
scanned_lines
391
weighted_findings
0
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
0
cochange_commits
22
cochange_share
0.0%
source_lines
391
test_lines
0
test_ratio
0
Documentationok2 items
  • README.md README.md
  • LICENSE LICENSE
check:changelog
no
check:contributing
no
check:license
yes
check:readme
yes
readme_lines
48
Type safetyskipped

Security

59 weak

Security posture is weak: 86 known vulnerabilities in 33 dependencies. Weakest area: posture.

How the score is built

  • Secrets97
  • Static analysis (SAST)100
  • Vulnerable dependencies1
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
13
declared
13
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
1
secrets_nonprod
0
Static analysis (opengrep)ok
findings
0
findings_high
0
findings_low
0
findings_medium
0
parse_errors
0
scanned_lines
391
weighted_findings
0
Dependencies (osv-scanner)ok
penalty
306
vulnerabilities
86
vulnerable_packages
33
vulns_critical
11
vulns_high
45
vulns_low
1
vulns_medium
24
vulns_unknown
5
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
2.1%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

11 critical45 high29 medium2 low

SeverityRuleLocationMessageTool
critical osv/GHSA-23hp-3jrh-7fpw yarn.lock [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw Dependencies (osv-scanner)
critical osv/GHSA-67hx-6x53-jw92 yarn.lock [email protected] (npm) is affected by GHSA-67hx-6x53-jw92 Dependencies (osv-scanner)
critical osv/GHSA-896r-f27r-55mw yarn.lock [email protected] (npm) is affected by GHSA-896r-f27r-55mw Dependencies (osv-scanner)
critical osv/GHSA-8r6j-v8pm-fqw3 yarn.lock [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 Dependencies (osv-scanner)
critical osv/GHSA-fjxv-7rqg-78g4 yarn.lock [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 Dependencies (osv-scanner)
critical osv/GHSA-hr2v-3952-633q yarn.lock [email protected] (npm) is affected by GHSA-hr2v-3952-633q Dependencies (osv-scanner)
critical osv/GHSA-jf85-cpcp-j695 yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-jf85-cpcp-j695 yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-jf85-cpcp-j695 yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
high osv/GHSA-23c5-xmqv-rm74 yarn.lock [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 Dependencies (osv-scanner)
high osv/GHSA-2m39-62fm-q8r3 yarn.lock [email protected] (npm) is affected by GHSA-2m39-62fm-q8r3 Dependencies (osv-scanner)
high osv/GHSA-34x7-hfp2-rc4v yarn.lock [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-394c-5j6w-4xmx yarn.lock [email protected] (npm) is affected by GHSA-394c-5j6w-4xmx Dependencies (osv-scanner)
high osv/GHSA-3jfq-g458-7qm9 yarn.lock [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 Dependencies (osv-scanner)
high osv/GHSA-3jxr-9vmj-r5cp yarn.lock [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp Dependencies (osv-scanner)
high osv/GHSA-3ppc-4f35-3m26 yarn.lock [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 Dependencies (osv-scanner)
high osv/GHSA-44pw-h2cw-w3vq yarn.lock [email protected] (npm) is affected by GHSA-44pw-h2cw-w3vq Dependencies (osv-scanner)
high osv/GHSA-5955-9wpr-37jh yarn.lock [email protected] (npm) is affected by GHSA-5955-9wpr-37jh Dependencies (osv-scanner)
high osv/GHSA-662x-fhqg-9p8v yarn.lock [email protected] (npm) is affected by GHSA-662x-fhqg-9p8v Dependencies (osv-scanner)
high osv/GHSA-6j4f-fj2g-mc7p yarn.lock [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p Dependencies (osv-scanner)
high osv/GHSA-78cj-fxph-m83p yarn.lock [email protected] (npm) is affected by GHSA-78cj-fxph-m83p Dependencies (osv-scanner)
high osv/GHSA-7r86-cg39-jmmj yarn.lock [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj Dependencies (osv-scanner)
high osv/GHSA-83g3-92jg-28cx yarn.lock [email protected] (npm) is affected by GHSA-83g3-92jg-28cx Dependencies (osv-scanner)
high osv/GHSA-8qq5-rm4j-mr97 yarn.lock [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 Dependencies (osv-scanner)
high osv/GHSA-8x88-c5mf-7j5w yarn.lock [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w Dependencies (osv-scanner)
high osv/GHSA-9c47-m6qq-7p4h yarn.lock [email protected] (npm) is affected by GHSA-9c47-m6qq-7p4h Dependencies (osv-scanner)
high osv/GHSA-9ppj-qmqm-q256 yarn.lock [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c429-5p7v-vgjp yarn.lock [email protected] (npm) is affected by GHSA-c429-5p7v-vgjp Dependencies (osv-scanner)
high osv/GHSA-f8q6-p94x-37v3 yarn.lock [email protected] (npm) is affected by GHSA-f8q6-p94x-37v3 Dependencies (osv-scanner)
high osv/GHSA-grv7-fg5c-xmjg yarn.lock [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg Dependencies (osv-scanner)
high osv/GHSA-hmw2-7cc7-3qxx yarn.lock [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx Dependencies (osv-scanner)
high osv/GHSA-hrpp-h998-j3pp yarn.lock [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp Dependencies (osv-scanner)
high osv/GHSA-j44m-qm6p-hp7m yarn.lock [email protected] (npm) is affected by GHSA-j44m-qm6p-hp7m Dependencies (osv-scanner)
high osv/GHSA-jp4x-w63m-7wgm yarn.lock [email protected] (npm) is affected by GHSA-jp4x-w63m-7wgm Dependencies (osv-scanner)
high osv/GHSA-mh99-v99m-4gvg yarn.lock [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-qffp-2rhf-9h96 yarn.lock [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 Dependencies (osv-scanner)
high osv/GHSA-qhr7-859c-m2p7 yarn.lock [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 Dependencies (osv-scanner)
high osv/GHSA-qqgx-2p2h-9c37 yarn.lock [email protected] (npm) is affected by GHSA-qqgx-2p2h-9c37 Dependencies (osv-scanner)
high osv/GHSA-r292-9mhp-454m yarn.lock [email protected] (npm) is affected by GHSA-r292-9mhp-454m Dependencies (osv-scanner)
high osv/GHSA-r5fr-rjxr-66jc yarn.lock [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc Dependencies (osv-scanner)
high osv/GHSA-r5fr-rjxr-66jc yarn.lock [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc Dependencies (osv-scanner)
high osv/GHSA-r683-j2x4-v87g yarn.lock [email protected] (npm) is affected by GHSA-r683-j2x4-v87g Dependencies (osv-scanner)
high osv/GHSA-r6q2-hw4h-h46w yarn.lock [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w Dependencies (osv-scanner)
high osv/GHSA-rgw5-rvv9-x895 yarn.lock [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 Dependencies (osv-scanner)
high osv/GHSA-w5hq-g745-h8pq yarn.lock [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq Dependencies (osv-scanner)
high osv/GHSA-w5p7-h5w8-2hfq yarn.lock [email protected] (npm) is affected by GHSA-w5p7-h5w8-2hfq Dependencies (osv-scanner)
high osv/GHSA-xf7w-r453-m56c yarn.lock [email protected] (npm) is affected by GHSA-xf7w-r453-m56c Dependencies (osv-scanner)
medium osv/GHSA-29mw-wpgm-hmr9 yarn.lock [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 Dependencies (osv-scanner)
medium osv/GHSA-29mw-wpgm-hmr9 yarn.lock [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 Dependencies (osv-scanner)
medium osv/GHSA-2g4f-4pwh-qvx6 yarn.lock [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 Dependencies (osv-scanner)
medium osv/GHSA-4mjr-xmp4-gh2g yarn.lock [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g Dependencies (osv-scanner)
medium osv/GHSA-4xc9-xhrj-v574 yarn.lock [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 Dependencies (osv-scanner)
medium osv/GHSA-4xc9-xhrj-v574 yarn.lock [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 Dependencies (osv-scanner)
medium osv/GHSA-6g33-f262-xjp4 yarn.lock [email protected] (npm) is affected by GHSA-6g33-f262-xjp4 Dependencies (osv-scanner)
medium osv/GHSA-6rw7-vpxm-498p yarn.lock [email protected] (npm) is affected by GHSA-6rw7-vpxm-498p Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-952p-6rrq-rcjv yarn.lock [email protected] (npm) is affected by GHSA-952p-6rrq-rcjv Dependencies (osv-scanner)
medium osv/GHSA-f5x3-32g6-xq36 yarn.lock [email protected] (npm) is affected by GHSA-f5x3-32g6-xq36 Dependencies (osv-scanner)
medium osv/GHSA-f886-m6hf-6m8v yarn.lock [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v Dependencies (osv-scanner)
medium osv/GHSA-fvqr-27wr-82fm yarn.lock [email protected] (npm) is affected by GHSA-fvqr-27wr-82fm Dependencies (osv-scanner)
medium osv/GHSA-fvqr-27wr-82fm yarn.lock [email protected] (npm) is affected by GHSA-fvqr-27wr-82fm Dependencies (osv-scanner)
medium osv/GHSA-gvwx-54wh-qm9j yarn.lock [email protected] (npm) is affected by GHSA-gvwx-54wh-qm9j Dependencies (osv-scanner)
medium osv/GHSA-mf6x-7mm4-x2g7 yarn.lock [email protected] (npm) is affected by GHSA-mf6x-7mm4-x2g7 Dependencies (osv-scanner)
medium osv/GHSA-p8p7-x288-28g6 yarn.lock [email protected] (npm) is affected by GHSA-p8p7-x288-28g6 Dependencies (osv-scanner)
medium osv/GHSA-q2hr-2g5m-vwhr yarn.lock [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr Dependencies (osv-scanner)
medium osv/GHSA-qrmc-fj45-qfc2 yarn.lock [email protected] (npm) is affected by GHSA-qrmc-fj45-qfc2 Dependencies (osv-scanner)
medium osv/GHSA-v88g-cgmw-v5xw yarn.lock [email protected] (npm) is affected by GHSA-v88g-cgmw-v5xw Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vmf3-w455-68vh yarn.lock [email protected] (npm) is affected by GHSA-vmf3-w455-68vh Dependencies (osv-scanner)
medium osv/GHSA-w8wr-v893-vjvp yarn.lock [email protected] (npm) is affected by GHSA-w8wr-v893-vjvp Dependencies (osv-scanner)
medium osv/GHSA-x5rq-j2xg-h7qm yarn.lock [email protected] (npm) is affected by GHSA-x5rq-j2xg-h7qm Dependencies (osv-scanner)
medium osv/GHSA-x5rq-j2xg-h7qm yarn.lock [email protected] (npm) is affected by GHSA-x5rq-j2xg-h7qm Dependencies (osv-scanner)
medium osv/GHSA-xxjr-mmjv-4gpg yarn.lock [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg Dependencies (osv-scanner)
medium osv/GHSA-xxjr-mmjv-4gpg yarn.lock [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg Dependencies (osv-scanner)
medium osv/MAL-2023-462 yarn.lock [email protected] (npm) is affected by MAL-2023-462 Dependencies (osv-scanner)
low gitleaks/generic-api-key bundle.js:29266 Possible generic-api-key secret in history (commit cd0e36ece9); removed from the current tree but still retrievable Secrets (gitleaks)
low osv/GHSA-v6h2-p8h4-qcjw yarn.lock [email protected] (npm) is affected by GHSA-v6h2-p8h4-qcjw Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceokprov-40
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4140
Tests and CICode qualityok—0
Type safetyCode qualityskipped—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.186
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4140
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.11

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-14978dffec405dprov-5+qual-2+sec-20%6659
2026-11-14978dffec405dprov-4+qual-2+sec-20%6659

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/jamiebuilds/spectacle-code-slide/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/jamiebuilds/spectacle-code-slide/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/jamiebuilds/spectacle-code-slide/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/jamiebuilds/spectacle-code-slide/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/jamiebuilds/spectacle-code-slide/security.svg)](https://repotrust.synapticcyber.com/r/github.com/jamiebuilds/spectacle-code-slide/)
Full text report

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 52% 100%
Code quality 66 adequate 90% 100%
Security 59 weak 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 0.0%
Month Lines added Attributed to AI
2016-03 345 0%
2016-08 114 0%
2016-09 1 0%
2016-10 13 0%
2017-10 3 0%
2017-11 5 0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 100
Duplication 100
Code smells (Opengrep) 100
Tests and CI 0
Documentation 65
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 35; mean complexity 1.9, 90th percentile 4; 0 complex and 0 long functions
  • Duplicated lines: 0.0% of 248 compared
  • Tests: 0 test lines for 391 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: contributing, changelog

Security

Security posture is weak: 86 known vulnerabilities in 33 dependencies. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 97
Static analysis (Opengrep) 100
Vulnerable dependencies (OSV) 1
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a

  • Known vulnerabilities: 86 in 33 packages (critical 11, high 45, medium 24, low 1)

  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
critical osv/GHSA-67hx-6x53-jw92: [email protected] (npm) is affected by GHSA-67hx-6x53-jw92 yarn.lock
critical osv/GHSA-hr2v-3952-633q: [email protected] (npm) is affected by GHSA-hr2v-3952-633q yarn.lock
critical osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 yarn.lock
critical osv/GHSA-8r6j-v8pm-fqw3: [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 yarn.lock
critical osv/GHSA-896r-f27r-55mw: [email protected] (npm) is affected by GHSA-896r-f27r-55mw yarn.lock
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 yarn.lock
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 yarn.lock
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-23hp-3jrh-7fpw: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw yarn.lock
high osv/GHSA-3jxr-9vmj-r5cp: [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp yarn.lock
high osv/GHSA-6j4f-fj2g-mc7p: [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p yarn.lock
high osv/GHSA-mh99-v99m-4gvg: [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg yarn.lock
high osv/GHSA-qhr7-859c-m2p7: [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 yarn.lock
high osv/GHSA-rgw5-rvv9-x895: [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 yarn.lock
high osv/GHSA-grv7-fg5c-xmjg: [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg yarn.lock
high osv/GHSA-hmw2-7cc7-3qxx: [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx yarn.lock
high osv/GHSA-xf7w-r453-m56c: [email protected] (npm) is affected by GHSA-xf7w-r453-m56c yarn.lock
high osv/GHSA-44pw-h2cw-w3vq: [email protected] (npm) is affected by GHSA-44pw-h2cw-w3vq yarn.lock
high osv/GHSA-c429-5p7v-vgjp: [email protected] (npm) is affected by GHSA-c429-5p7v-vgjp yarn.lock
high osv/GHSA-jp4x-w63m-7wgm: [email protected] (npm) is affected by GHSA-jp4x-w63m-7wgm yarn.lock
high osv/GHSA-qqgx-2p2h-9c37: [email protected] (npm) is affected by GHSA-qqgx-2p2h-9c37 yarn.lock
high osv/GHSA-9c47-m6qq-7p4h: [email protected] (npm) is affected by GHSA-9c47-m6qq-7p4h yarn.lock
high osv/GHSA-35jh-r3h4-6jhm: [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm yarn.lock

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 391; test lines: 0
Language Lines
JavaScript 391