RepoTrust

Leaderboard github.com

morehosseini/AI-Integration-in-Construction-Education

  • View repository ↗
  • Python
  • ★ 1
  • commit c938f6966a2d
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

possible

Confidence
46%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

42/100

poor

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

83/100

adequate

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

AI provenance

0% possible

Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence).

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts100%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace1
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)4.07

Lines added per month all AI-attributed share

  1. 2026-010 · 0% AI
  2. 2026-020 · 0% AI
  3. 2026-054,917 · 0% AI
  4. 2026-070 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
23
effective_loc
4,917
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok1 item
excluded_import_loc
0
flagged_loc
4,917
flagged_loc_share
100.0%
flagged_units
1
max_loc_per_hour
1,229.25
measured_loc
4,917
median_loc_per_hour
1,229.25
pr_timed_units
0
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
0
work_units
1
Release velocityskipped
Coding styleok
count:assistant_voice
0
count:emoji_in_code
40
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
7
files:narrated_steps
0
files:placeholder
0
index
4.07
lines_scanned
4,917
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
8.13
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

42 poor

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 31% of function code in complex or long functions; 3% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity39
  • Duplication85
  • Lint and smells47
  • Tests and CI0
  • Documentation80
  • Type safety40
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok10 items
complex_functions
11
function_nloc
3,012
functions
134
long_functions
4
many_param_functions
1
mean_ccn
5.92
p90_ccn
13
risky_nloc_share
31.3%
Duplication (jscpd)ok2 items
compared_lines
3,774
duplicated_lines
102
duplicated_share
2.7%
files
17
Lintok
category:best-practice
6
category:maintainability
9
findings
15
scanned_lines
4,917
weighted_findings
15
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
0
cochange_commits
3
cochange_share
0.0%
source_lines
4,917
test_lines
0
test_ratio
0
Documentationok3 items
  • README.md README.md
  • LICENSE LICENSE
  • CONTRIBUTING.md CONTRIBUTING.md
check:changelog
no
check:contributing
yes
check:license
yes
check:readme
yes
readme_lines
35
Type safetyok
check:low_escape_density
yes
check:strict_config
no
escapes
0
escapes_per_kloc
0

Security

83 adequate

Security posture is adequate: 4 known vulnerabilities in 3 dependencies. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)100
  • Vulnerable dependencies86
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
9
declared
9
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
0
findings_high
0
findings_low
0
findings_medium
0
parse_errors
0
scanned_lines
4,917
weighted_findings
0
Dependencies (osv-scanner)ok
penalty
9
vulnerabilities
4
vulnerable_packages
3
vulns_critical
0
vulns_high
0
vulns_low
0
vulns_medium
4
vulns_unknown
0
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
4.3%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

19 medium

SeverityRuleLocationMessageTool
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/calendar_engine.py:271 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/cpm_engine.py:380 Is "is_critical" a function or an attribute? If it is a function, you may have meant a.is_critical() because a.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/cpm_engine.py:449 Is "is_critical" a function or an attribute? If it is a function, you may have meant act.is_critical() because act.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/cpm_engine.py:463 Is "is_critical" a function or an attribute? If it is a function, you may have meant act.is_critical() because act.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/excel_export.py:222 Is "is_critical" a function or an attribute? If it is a function, you may have meant act.is_critical() because act.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/excel_export.py:231 Is "is_critical" a function or an attribute? If it is a function, you may have meant act.is_critical() because act.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.return-not-in-function chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/models.py:323 `return` only makes sense inside a function Lint
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/procurement.py:23 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/core/validation_engine.py:275 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_04_schedule.py:1117 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_04_schedule.py:924 Is "is_critical" a function or an attribute? If it is a function, you may have meant a.is_critical() because a.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_05_export.py:110 Is "is_critical" a function or an attribute? If it is a function, you may have meant a.is_critical() because a.is_critical is always true. Lint
medium opengrep/python.lang.maintainability.is-function-without-parentheses chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_05_export.py:166 Is "is_critical" a function or an attribute? If it is a function, you may have meant activity.is_critical() because activity.is_critical is always true. Lint
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_06_knowledge.py:75 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium opengrep/python.lang.best-practice.unspecified-open-encoding chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/app/pages/page_06_knowledge.py:94 Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8"). Lint
medium osv/GHSA-7p48-42j8-8846 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt [email protected] (PyPI) is affected by PYSEC-2026-2285, GHSA-7p48-42j8-8846 Dependencies (osv-scanner)
medium osv/GHSA-mf9w-mj56-hr94 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt [email protected] (PyPI) is affected by PYSEC-2026-2270, GHSA-mf9w-mj56-hr94 Dependencies (osv-scanner)
medium osv/GHSA-mr82-8j83-vxmv chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt [email protected] (PyPI) is affected by PYSEC-2026-1812, GHSA-mr82-8j83-vxmv Dependencies (osv-scanner)
medium osv/GHSA-vqwp-45wm-r9r5 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt [email protected] (PyPI) is affected by PYSEC-2026-212, GHSA-vqwp-45wm-r9r5 Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b41415
Tests and CICode qualityok—0
Type safetyCode qualityok—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.14
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4140
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-14c938f6966a2dprov-5+qual-2+sec-20%4283
2026-11-14c938f6966a2dprov-4+qual-2+sec-20%4283

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/morehosseini/AI-Integration-in-Construction-Education/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/morehosseini/AI-Integration-in-Construction-Education/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/morehosseini/AI-Integration-in-Construction-Education/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/morehosseini/AI-Integration-in-Construction-Education/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/morehosseini/AI-Integration-in-Construction-Education/security.svg)](https://repotrust.synapticcyber.com/r/github.com/morehosseini/AI-Integration-in-Construction-Education/)
Full text report

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 possible 46% 100%
Code quality 42 poor 90% 100%
Security 83 adequate 85% 100%

AI provenance

Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence).

  • Explicitly attributed share (lower bound): 0.0%

  • Unattributed share in AI-consistent velocity bursts: 100.0%

  • Estimated AI-generated share: 0.0%

  • Stylometry index: 4.07 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 40). Reported as a signal, not scored.

Month Lines added Attributed to AI
2026-05 4,917 0%

Evidence

  • 4,917 lines of first-party code in ~4.0h (1,229 lines/hour, 1 commit session) (64f80aec4f93)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 31% of function code in complex or long functions; 3% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 39
Duplication 85
Code smells (Opengrep) 47
Tests and CI 0
Documentation 80
Type safety 40
Process (Scorecard review/maintenance) n/a
  • Functions: 134; mean complexity 5.9, 90th percentile 13; 11 complex and 4 long functions
  • Duplicated lines: 2.7% of 3,774 compared
  • Tests: 0 test lines for 4,917 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: changelog

Most complex functions:

Security

Security posture is adequate: 4 known vulnerabilities in 3 dependencies. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 100
Vulnerable dependencies (OSV) 86
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a
  • Known vulnerabilities: 4 in 3 packages (critical 0, high 0, medium 4, low 0)

  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
medium osv/GHSA-mr82-8j83-vxmv: [email protected] (PyPI) is affected by PYSEC-2026-1812, GHSA-mr82-8j83-vxmv chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt
medium osv/GHSA-mf9w-mj56-hr94: [email protected] (PyPI) is affected by PYSEC-2026-2270, GHSA-mf9w-mj56-hr94 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt
medium osv/GHSA-vqwp-45wm-r9r5: [email protected] (PyPI) is affected by PYSEC-2026-212, GHSA-vqwp-45wm-r9r5 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt
medium osv/GHSA-7p48-42j8-8846: [email protected] (PyPI) is affected by PYSEC-2026-2285, GHSA-7p48-42j8-8846 chapters/Chapter_12_Hosseini_AI-Assisted-Programming/code/construction-planning-app/requirements.txt

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 4,917; test lines: 0
Language Lines
Python 4,917