RepoTrust

Leaderboard github.com

phodal/mooa

Mooa 是一个为 Angular 服务的微前端框架。A independent-deployment micro-frontend Framework for Angular from single-spa.

  • View repository ↗
  • TypeScript
  • ★ 841
  • commit 96325e643ec5
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

76/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

54/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON RepoTrust ai badgeRepoTrust quality badgeRepoTrust security badge

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.19

Lines added per month all AI-attributed share

  1. 2018-036,028 · 0% AI
  2. 2018-043,033 · 0% AI
  3. 2018-070 · 0% AI
  4. 2018-1118 · 0% AI
  5. 2019-010 · 0% AI
  6. 2019-067 · 0% AI
  7. 2019-070 · 0% AI
  8. 2019-110 · 0% AI
  9. 2019-120 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
420
effective_loc
9,086
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
757.75
measured_loc
9,086
median_loc_per_hour
42.85
pr_timed_units
0
pre_ai_era_burst_loc
3,031
pre_ai_era_bursts
1
pre_ai_era_measured_loc
9,086
work_units
72
Release velocityskipped
Coding styleok1 item
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
1
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
1
files:placeholder
0
index
0.19
lines_scanned
5,330
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0.19
per_kloc:placeholder
0

Code quality

76 adequate

Code quality is adequate: test-to-source ratio 0.23, CI runs tests; 6% of function code in complex or long functions; 5% duplicated lines. Weakest area: type safety.

How the score is built

  • Complexity83
  • Duplication72
  • Lint and smells99
  • Tests and CI68
  • Documentation65
  • Type safety60
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok10 items
complex_functions
56
function_nloc
12,246
functions
8,430
long_functions
2
many_param_functions
37
mean_ccn
2.18
p90_ccn
4
risky_nloc_share
6.2%
Duplication (jscpd)ok6 items
compared_lines
3,773
duplicated_lines
204
duplicated_share
5.4%
files
57
Lintok
category:correctness
1
findings
1
scanned_lines
5,331
weighted_findings
0.25
Tests and CIok2 items
  • CI config: .travis.yml .travis.yml
  • CI runs tests (npm run test)
check:ci_present
yes
check:ci_runs_lint
no
check:ci_runs_tests
yes
check:has_tests
yes
check:test_ratio
no
check:tests_cochange
no
ci_files
1
cochange_commits
154
cochange_share
4.5%
source_lines
5,331
test_lines
1,225
test_ratio
0.23
Documentationok2 items
  • README.md README.md
  • LICENSE LICENSE
check:changelog
no
check:contributing
no
check:license
yes
check:readme
yes
readme_lines
217
Type safetyok1 item
  • TypeScript strict type checking: tsconfig.json tsconfig.json
check:low_escape_density
no
check:strict_config
no
escapes
122
escapes_per_kloc
55.13

Security

54 weak

Security posture is weak: 191 known vulnerabilities in 92 dependencies; 5 high-severity SAST findings. Weakest area: dependencies.

How the score is built

  • Secrets97
  • Static analysis (SAST)73
  • Vulnerable dependencies0
  • CI workflowsnot measured
  • Security posture20
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
35
declared
35
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
1
secrets_nonprod
0
Static analysis (opengrep)ok
findings
9
findings_high
5
findings_low
0
findings_medium
4
parse_errors
0
scanned_lines
5,331
weighted_findings
4.75
Dependencies (osv-scanner)ok
penalty
700
vulnerabilities
191
vulnerable_packages
92
vulns_critical
23
vulns_high
96
vulns_low
9
vulns_medium
49
vulns_unknown
14
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
yes
signed_commit_share
100.0%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

23 critical101 high67 medium11 low

SeverityRuleLocationMessageTool
critical osv/GHSA-jf85-cpcp-j695 deploy/yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-23hp-3jrh-7fpw yarn.lock [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw Dependencies (osv-scanner)
critical osv/GHSA-2w6w-674q-4c4q yarn.lock [email protected] (npm) is affected by GHSA-2w6w-674q-4c4q Dependencies (osv-scanner)
critical osv/GHSA-4g88-fppr-53pp yarn.lock [email protected] (npm) is affected by GHSA-4g88-fppr-53pp Dependencies (osv-scanner)
critical osv/GHSA-4g88-fppr-53pp yarn.lock [email protected] (npm) is affected by GHSA-4g88-fppr-53pp Dependencies (osv-scanner)
critical osv/GHSA-67hx-6x53-jw92 yarn.lock @babel/[email protected] (npm) is affected by GHSA-67hx-6x53-jw92 Dependencies (osv-scanner)
critical osv/GHSA-6fw4-hr69-g3rv yarn.lock [email protected] (npm) is affected by GHSA-6fw4-hr69-g3rv Dependencies (osv-scanner)
critical osv/GHSA-765h-qjxv-5f44 yarn.lock [email protected] (npm) is affected by GHSA-765h-qjxv-5f44 Dependencies (osv-scanner)
critical osv/GHSA-896r-f27r-55mw yarn.lock [email protected] (npm) is affected by GHSA-896r-f27r-55mw Dependencies (osv-scanner)
critical osv/GHSA-8r5x-fm3f-whwj yarn.lock [email protected] (npm) is affected by GHSA-8r5x-fm3f-whwj Dependencies (osv-scanner)
critical osv/GHSA-8r6j-v8pm-fqw3 yarn.lock [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 Dependencies (osv-scanner)
critical osv/GHSA-9w5j-4mwv-2wj8 yarn.lock [email protected] (npm) is affected by GHSA-9w5j-4mwv-2wj8 Dependencies (osv-scanner)
critical osv/GHSA-f2jv-r9rf-7988 yarn.lock [email protected] (npm) is affected by GHSA-f2jv-r9rf-7988 Dependencies (osv-scanner)
critical osv/GHSA-fhjf-83wg-r2j9 yarn.lock [email protected] (npm) is affected by GHSA-fhjf-83wg-r2j9 Dependencies (osv-scanner)
critical osv/GHSA-fjxv-7rqg-78g4 yarn.lock [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 Dependencies (osv-scanner)
critical osv/GHSA-hffm-xvc3-vprc yarn.lock [email protected] (npm) is affected by GHSA-hffm-xvc3-vprc Dependencies (osv-scanner)
critical osv/GHSA-j7fq-p9q7-5wfv yarn.lock [email protected] (npm) is affected by GHSA-j7fq-p9q7-5wfv Dependencies (osv-scanner)
critical osv/GHSA-jf85-cpcp-j695 yarn.lock [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 Dependencies (osv-scanner)
critical osv/GHSA-p8wg-vrv2-v86f yarn.lock [email protected] (npm) is affected by GHSA-p8wg-vrv2-v86f Dependencies (osv-scanner)
critical osv/GHSA-w457-6q6x-cgp9 yarn.lock [email protected] (npm) is affected by GHSA-w457-6q6x-cgp9 Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
critical osv/GHSA-xvch-5gv4-984h yarn.lock [email protected] (npm) is affected by GHSA-xvch-5gv4-984h Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm deploy/yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw deploy/yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-r5fr-rjxr-66jc deploy/yarn.lock [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc Dependencies (osv-scanner)
high opengrep/javascript.browser.security.insecure-document-method src/helper/dom.utils.ts:96 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/helper/dom.utils.ts:96 User controlled data in a `iframeEl.contentWindow.document.head.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-document-method src/helper/loader.helper.ts:150 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/helper/loader.helper.ts:150 User controlled data in a `dom.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.shelljs.security.shelljs-exec-injection tools/gh-pages-publish.ts:28 If unverified user data can reach the `exec` method it can result in Remote Code Execution [confidence low] Static analysis (opengrep)
high osv/GHSA-23c5-xmqv-rm74 yarn.lock [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 Dependencies (osv-scanner)
high osv/GHSA-2883-xcg3-v3hh yarn.lock [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh Dependencies (osv-scanner)
high osv/GHSA-28xr-mwxg-3qc8 yarn.lock [email protected] (npm) is affected by GHSA-28xr-mwxg-3qc8 Dependencies (osv-scanner)
high osv/GHSA-2cf5-4w76-r9qv yarn.lock [email protected] (npm) is affected by GHSA-2cf5-4w76-r9qv Dependencies (osv-scanner)
high osv/GHSA-2p57-rm9w-gvfp yarn.lock [email protected] (npm) is affected by GHSA-2p57-rm9w-gvfp Dependencies (osv-scanner)
high osv/GHSA-34x7-hfp2-rc4v yarn.lock [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v Dependencies (osv-scanner)
high osv/GHSA-35jh-r3h4-6jhm yarn.lock [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm Dependencies (osv-scanner)
high osv/GHSA-3cqr-58rm-57f8 yarn.lock [email protected] (npm) is affected by GHSA-3cqr-58rm-57f8 Dependencies (osv-scanner)
high osv/GHSA-3f95-r44v-8mrg yarn.lock [email protected] (npm) is affected by GHSA-3f95-r44v-8mrg Dependencies (osv-scanner)
high osv/GHSA-3h5v-q93c-6h6q yarn.lock [email protected] (npm) is affected by GHSA-3h5v-q93c-6h6q Dependencies (osv-scanner)
high osv/GHSA-3h5v-q93c-6h6q yarn.lock [email protected] (npm) is affected by GHSA-3h5v-q93c-6h6q Dependencies (osv-scanner)
high osv/GHSA-3jfq-g458-7qm9 yarn.lock [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 Dependencies (osv-scanner)
high osv/GHSA-3jxr-9vmj-r5cp yarn.lock [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp Dependencies (osv-scanner)
high osv/GHSA-3mfm-83xf-c92r yarn.lock [email protected] (npm) is affected by GHSA-3mfm-83xf-c92r Dependencies (osv-scanner)
high osv/GHSA-3ppc-4f35-3m26 yarn.lock [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 Dependencies (osv-scanner)
high osv/GHSA-3xgq-45jj-v275 yarn.lock [email protected] (npm) is affected by GHSA-3xgq-45jj-v275 Dependencies (osv-scanner)
high osv/GHSA-3xgq-45jj-v275 yarn.lock [email protected] (npm) is affected by GHSA-3xgq-45jj-v275 Dependencies (osv-scanner)
high osv/GHSA-44c6-4v22-4mhx yarn.lock [email protected] (npm) is affected by GHSA-44c6-4v22-4mhx Dependencies (osv-scanner)
high osv/GHSA-44c6-4v22-4mhx yarn.lock [email protected] (npm) is affected by GHSA-44c6-4v22-4mhx Dependencies (osv-scanner)
high osv/GHSA-4jqc-8m5r-9rpr yarn.lock [email protected] (npm) is affected by GHSA-4jqc-8m5r-9rpr Dependencies (osv-scanner)
high osv/GHSA-4jqc-8m5r-9rpr yarn.lock [email protected] (npm) is affected by GHSA-4jqc-8m5r-9rpr Dependencies (osv-scanner)
high osv/GHSA-4rq4-32rv-6wp6 yarn.lock [email protected] (npm) is affected by GHSA-4rq4-32rv-6wp6 Dependencies (osv-scanner)
high osv/GHSA-4rq4-32rv-6wp6 yarn.lock [email protected] (npm) is affected by GHSA-4rq4-32rv-6wp6 Dependencies (osv-scanner)
high osv/GHSA-52cp-r559-cp3m yarn.lock [email protected] (npm) is affected by GHSA-52cp-r559-cp3m Dependencies (osv-scanner)
high osv/GHSA-5955-9wpr-37jh yarn.lock [email protected] (npm) is affected by GHSA-5955-9wpr-37jh Dependencies (osv-scanner)
high osv/GHSA-5p4m-2wfm-xmqj yarn.lock [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj Dependencies (osv-scanner)
high osv/GHSA-5v2h-r2cx-5xgj yarn.lock [email protected] (npm) is affected by GHSA-5v2h-r2cx-5xgj Dependencies (osv-scanner)
high osv/GHSA-5v2h-r2cx-5xgj yarn.lock [email protected] (npm) is affected by GHSA-5v2h-r2cx-5xgj Dependencies (osv-scanner)
high osv/GHSA-62gr-4qp9-h98f yarn.lock [email protected] (npm) is affected by GHSA-62gr-4qp9-h98f Dependencies (osv-scanner)
high osv/GHSA-6c8f-qphg-qjgp yarn.lock [email protected] (npm) is affected by GHSA-6c8f-qphg-qjgp Dependencies (osv-scanner)
high osv/GHSA-6chw-6frg-f759 yarn.lock [email protected] (npm) is affected by GHSA-6chw-6frg-f759 Dependencies (osv-scanner)
high osv/GHSA-6chw-6frg-f759 yarn.lock [email protected] (npm) is affected by GHSA-6chw-6frg-f759 Dependencies (osv-scanner)
high osv/GHSA-6j4f-fj2g-mc7p yarn.lock [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p Dependencies (osv-scanner)
high osv/GHSA-7p7h-4mm5-852v yarn.lock [email protected] (npm) is affected by GHSA-7p7h-4mm5-852v Dependencies (osv-scanner)
high osv/GHSA-7r86-cg39-jmmj yarn.lock [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj Dependencies (osv-scanner)
high osv/GHSA-7wpw-2hjm-89gp yarn.lock [email protected] (npm) is affected by GHSA-7wpw-2hjm-89gp Dependencies (osv-scanner)
high osv/GHSA-83g3-92jg-28cx yarn.lock [email protected] (npm) is affected by GHSA-83g3-92jg-28cx Dependencies (osv-scanner)
high osv/GHSA-858h-whjf-mvg5 yarn.lock [email protected] (npm) is affected by GHSA-858h-whjf-mvg5 Dependencies (osv-scanner)
high osv/GHSA-8qq5-rm4j-mr97 yarn.lock [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 Dependencies (osv-scanner)
high osv/GHSA-8x88-c5mf-7j5w yarn.lock [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w Dependencies (osv-scanner)
high osv/GHSA-93q8-gq69-wqmw yarn.lock [email protected] (npm) is affected by GHSA-93q8-gq69-wqmw Dependencies (osv-scanner)
high osv/GHSA-93q8-gq69-wqmw yarn.lock [email protected] (npm) is affected by GHSA-93q8-gq69-wqmw Dependencies (osv-scanner)
high osv/GHSA-96hv-2xvq-fx4p yarn.lock [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p Dependencies (osv-scanner)
high osv/GHSA-96hv-2xvq-fx4p yarn.lock [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p Dependencies (osv-scanner)
high osv/GHSA-9c47-m6qq-7p4h yarn.lock [email protected] (npm) is affected by GHSA-9c47-m6qq-7p4h Dependencies (osv-scanner)
high osv/GHSA-9cx6-37pm-9jff yarn.lock [email protected] (npm) is affected by GHSA-9cx6-37pm-9jff Dependencies (osv-scanner)
high osv/GHSA-9p95-fxvg-qgq2 yarn.lock [email protected] (npm) is affected by GHSA-9p95-fxvg-qgq2 Dependencies (osv-scanner)
high osv/GHSA-9ppj-qmqm-q256 yarn.lock [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 Dependencies (osv-scanner)
high osv/GHSA-9r2w-394v-53qc yarn.lock [email protected] (npm) is affected by GHSA-9r2w-394v-53qc Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c2qf-rxjj-qqgw yarn.lock [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw Dependencies (osv-scanner)
high osv/GHSA-c4w7-xm78-47vh yarn.lock [email protected] (npm) is affected by GHSA-c4w7-xm78-47vh Dependencies (osv-scanner)
high osv/GHSA-c4w7-xm78-47vh yarn.lock [email protected] (npm) is affected by GHSA-c4w7-xm78-47vh Dependencies (osv-scanner)
high osv/GHSA-f8q6-p94x-37v3 yarn.lock [email protected] (npm) is affected by GHSA-f8q6-p94x-37v3 Dependencies (osv-scanner)
high osv/GHSA-ff7x-qrg7-qggm yarn.lock [email protected] (npm) is affected by GHSA-ff7x-qrg7-qggm Dependencies (osv-scanner)
high osv/GHSA-ff7x-qrg7-qggm yarn.lock [email protected] (npm) is affected by GHSA-ff7x-qrg7-qggm Dependencies (osv-scanner)
high osv/GHSA-g4wm-2vf7-vfgr yarn.lock [email protected] (npm) is affected by GHSA-g4wm-2vf7-vfgr Dependencies (osv-scanner)
high osv/GHSA-gcx4-mw62-g8wm yarn.lock [email protected] (npm) is affected by GHSA-gcx4-mw62-g8wm Dependencies (osv-scanner)
high osv/GHSA-grv7-fg5c-xmjg yarn.lock [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg Dependencies (osv-scanner)
high osv/GHSA-hmw2-7cc7-3qxx yarn.lock [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx Dependencies (osv-scanner)
high osv/GHSA-hrpp-h998-j3pp yarn.lock [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp Dependencies (osv-scanner)
high osv/GHSA-jcxm-m3jx-f287 yarn.lock [email protected] (npm) is affected by GHSA-jcxm-m3jx-f287 Dependencies (osv-scanner)
high osv/GHSA-jgrx-mgxx-jf9v yarn.lock [email protected] (npm) is affected by GHSA-jgrx-mgxx-jf9v Dependencies (osv-scanner)
high osv/GHSA-mh99-v99m-4gvg yarn.lock [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg Dependencies (osv-scanner)
high osv/GHSA-mw96-cpmx-2vgc yarn.lock [email protected] (npm) is affected by GHSA-mw96-cpmx-2vgc Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-p6mc-m468-83gw yarn.lock [email protected] (npm) is affected by GHSA-p6mc-m468-83gw Dependencies (osv-scanner)
high osv/GHSA-ph9p-34f9-6g65 yarn.lock [email protected] (npm) is affected by GHSA-ph9p-34f9-6g65 Dependencies (osv-scanner)
high osv/GHSA-pw54-mh39-w3hc yarn.lock [email protected] (npm) is affected by GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p Dependencies (osv-scanner)
high osv/GHSA-px4h-xg32-q955 yarn.lock [email protected] (npm) is affected by GHSA-px4h-xg32-q955 Dependencies (osv-scanner)
high osv/GHSA-qffp-2rhf-9h96 yarn.lock [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 Dependencies (osv-scanner)
high osv/GHSA-qhr7-859c-m2p7 yarn.lock [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 Dependencies (osv-scanner)
high osv/GHSA-qq89-hq3f-393p yarn.lock [email protected] (npm) is affected by GHSA-qq89-hq3f-393p Dependencies (osv-scanner)
high osv/GHSA-qqgx-2p2h-9c37 yarn.lock [email protected] (npm) is affected by GHSA-qqgx-2p2h-9c37 Dependencies (osv-scanner)
high osv/GHSA-qr28-fpjm-wq7f yarn.lock [email protected] (npm) is affected by GHSA-qr28-fpjm-wq7f Dependencies (osv-scanner)
high osv/GHSA-r292-9mhp-454m yarn.lock [email protected] (npm) is affected by GHSA-r292-9mhp-454m Dependencies (osv-scanner)
high osv/GHSA-r2j6-p67h-q639 yarn.lock [email protected] (npm) is affected by GHSA-r2j6-p67h-q639 Dependencies (osv-scanner)
high osv/GHSA-r5fr-rjxr-66jc yarn.lock [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc Dependencies (osv-scanner)
high osv/GHSA-r628-mhmh-qjhw yarn.lock [email protected] (npm) is affected by GHSA-r628-mhmh-qjhw Dependencies (osv-scanner)
high osv/GHSA-r683-j2x4-v87g yarn.lock [email protected] (npm) is affected by GHSA-r683-j2x4-v87g Dependencies (osv-scanner)
high osv/GHSA-r6q2-hw4h-h46w yarn.lock [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w Dependencies (osv-scanner)
high osv/GHSA-rc47-6667-2j5j yarn.lock [email protected] (npm) is affected by GHSA-rc47-6667-2j5j Dependencies (osv-scanner)
high osv/GHSA-rgw5-rvv9-x895 yarn.lock [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 Dependencies (osv-scanner)
high osv/GHSA-rp65-9cf3-cjxr yarn.lock [email protected] (npm) is affected by GHSA-rp65-9cf3-cjxr Dependencies (osv-scanner)
high osv/GHSA-rrrm-qjm4-v8hf yarn.lock [email protected] (npm) is affected by GHSA-rrrm-qjm4-v8hf Dependencies (osv-scanner)
high osv/GHSA-rrrm-qjm4-v8hf yarn.lock [email protected] (npm) is affected by GHSA-rrrm-qjm4-v8hf Dependencies (osv-scanner)
high osv/GHSA-vx3p-948g-6vhq yarn.lock [email protected] (npm) is affected by GHSA-vx3p-948g-6vhq Dependencies (osv-scanner)
high osv/GHSA-w573-4hg7-7wgq yarn.lock [email protected] (npm) is affected by GHSA-w573-4hg7-7wgq Dependencies (osv-scanner)
high osv/GHSA-w5hq-g745-h8pq yarn.lock [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq Dependencies (osv-scanner)
high osv/GHSA-x55w-vjjp-222r yarn.lock [email protected] (npm) is affected by GHSA-x55w-vjjp-222r Dependencies (osv-scanner)
high osv/GHSA-xhpv-hc6g-r9c6 yarn.lock [email protected] (npm) is affected by GHSA-xhpv-hc6g-r9c6 Dependencies (osv-scanner)
high osv/GHSA-xjpj-3mr7-gcpf yarn.lock [email protected] (npm) is affected by GHSA-xjpj-3mr7-gcpf Dependencies (osv-scanner)
medium osv/GHSA-29mw-wpgm-hmr9 deploy/yarn.lock [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 Dependencies (osv-scanner)
medium osv/GHSA-4xc9-xhrj-v574 deploy/yarn.lock [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 Dependencies (osv-scanner)
medium osv/GHSA-x5rq-j2xg-h7qm deploy/yarn.lock [email protected] (npm) is affected by GHSA-x5rq-j2xg-h7qm Dependencies (osv-scanner)
medium osv/GHSA-xxjr-mmjv-4gpg deploy/yarn.lock [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg Dependencies (osv-scanner)
medium opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename src/cli/generate.ts:8 Detected that function argument `program` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... Static analysis (opengrep)
medium opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename src/cli/generate.ts:9 Detected that function argument `program` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... Static analysis (opengrep)
medium opengrep/javascript.lang.security.audit.detect-redos src/helper/loader.helper.ts:158 Detected the use of a regular expression `^(http:\/\/www\.|https:\/\/www\.|http:\/\/|https:\/\/)?[a-z0-9]+([\-\.]{1}[a-z0-9]+)*\.[a-z]{2,5}(:[0-9]{1,5})?(\/.*)?$` which appears to be vulnerable to a Regular expression Denial-of-Service... Static analysis (opengrep)
medium opengrep/javascript.lang.security.audit.detect-redos src/helper/loader.helper.ts:165 Detected the use of a regular expression `^(http:\/\/www\.|https:\/\/www\.|http:\/\/|https:\/\/)?[a-z0-9]+([\-\.]{1}[a-z0-9]+)*\.[a-z]{2,5}(:[0-9]{1,5})?(\/.*)?$` which appears to be vulnerable to a Regular expression Denial-of-Service... Static analysis (opengrep)
medium osv/GHSA-29mw-wpgm-hmr9 yarn.lock [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 Dependencies (osv-scanner)
medium osv/GHSA-2g4f-4pwh-qvx6 yarn.lock [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 Dependencies (osv-scanner)
medium osv/GHSA-2qvq-rjwj-gvw9 yarn.lock [email protected] (npm) is affected by GHSA-2qvq-rjwj-gvw9 Dependencies (osv-scanner)
medium osv/GHSA-38fc-wpqx-33j7 yarn.lock [email protected] (npm) is affected by GHSA-38fc-wpqx-33j7 Dependencies (osv-scanner)
medium osv/GHSA-43f8-2h32-f4cj yarn.lock [email protected] (npm) is affected by GHSA-43f8-2h32-f4cj Dependencies (osv-scanner)
medium osv/GHSA-4mjr-xmp4-gh2g yarn.lock [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g Dependencies (osv-scanner)
medium osv/GHSA-4x5v-gmq8-25ch yarn.lock [email protected] (npm) is affected by GHSA-4x5v-gmq8-25ch Dependencies (osv-scanner)
medium osv/GHSA-4x5v-gmq8-25ch yarn.lock [email protected] (npm) is affected by GHSA-4x5v-gmq8-25ch Dependencies (osv-scanner)
medium osv/GHSA-5fw9-fq32-wv5p yarn.lock [email protected] (npm) is affected by GHSA-5fw9-fq32-wv5p Dependencies (osv-scanner)
medium osv/GHSA-64g7-mvw6-v9qj yarn.lock [email protected] (npm) is affected by GHSA-64g7-mvw6-v9qj Dependencies (osv-scanner)
medium osv/GHSA-64g7-mvw6-v9qj yarn.lock [email protected] (npm) is affected by GHSA-64g7-mvw6-v9qj Dependencies (osv-scanner)
medium osv/GHSA-6fc8-4gx4-v693 yarn.lock [email protected] (npm) is affected by GHSA-6fc8-4gx4-v693 Dependencies (osv-scanner)
medium osv/GHSA-6fc8-4gx4-v693 yarn.lock [email protected] (npm) is affected by GHSA-6fc8-4gx4-v693 Dependencies (osv-scanner)
medium osv/GHSA-6rw7-vpxm-498p yarn.lock [email protected] (npm) is affected by GHSA-6rw7-vpxm-498p Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-72xf-g2v4-qvf3 yarn.lock [email protected] (npm) is affected by GHSA-72xf-g2v4-qvf3 Dependencies (osv-scanner)
medium osv/GHSA-78xj-cgh5-2h22 yarn.lock [email protected] (npm) is affected by GHSA-78xj-cgh5-2h22 Dependencies (osv-scanner)
medium osv/GHSA-7wwv-vh3v-89cq yarn.lock [email protected] (npm) is affected by GHSA-7wwv-vh3v-89cq Dependencies (osv-scanner)
medium osv/GHSA-884p-74jh-xrg2 yarn.lock [email protected] (npm) is affected by GHSA-884p-74jh-xrg2 Dependencies (osv-scanner)
medium osv/GHSA-93f3-23rq-pjfp yarn.lock [email protected] (npm) is affected by GHSA-93f3-23rq-pjfp Dependencies (osv-scanner)
medium osv/GHSA-952p-6rrq-rcjv yarn.lock [email protected] (npm) is affected by GHSA-952p-6rrq-rcjv Dependencies (osv-scanner)
medium osv/GHSA-968p-4wvh-cqc8 yarn.lock @babel/[email protected] (npm) is affected by GHSA-968p-4wvh-cqc8 Dependencies (osv-scanner)
medium osv/GHSA-968p-4wvh-cqc8 yarn.lock @babel/[email protected] (npm) is affected by GHSA-968p-4wvh-cqc8 Dependencies (osv-scanner)
medium osv/GHSA-ch52-vgq2-943f yarn.lock [email protected] (npm) is affected by GHSA-ch52-vgq2-943f Dependencies (osv-scanner)
medium osv/GHSA-ch52-vgq2-943f yarn.lock [email protected] (npm) is affected by GHSA-ch52-vgq2-943f Dependencies (osv-scanner)
medium osv/GHSA-f52g-6jhx-586p yarn.lock [email protected] (npm) is affected by GHSA-f52g-6jhx-586p Dependencies (osv-scanner)
medium osv/GHSA-f5x3-32g6-xq36 yarn.lock [email protected] (npm) is affected by GHSA-f5x3-32g6-xq36 Dependencies (osv-scanner)
medium osv/GHSA-f886-m6hf-6m8v yarn.lock [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v Dependencies (osv-scanner)
medium osv/GHSA-g9r4-xpmj-mj65 yarn.lock [email protected] (npm) is affected by GHSA-g9r4-xpmj-mj65 Dependencies (osv-scanner)
medium osv/GHSA-gvwx-54wh-qm9j yarn.lock [email protected] (npm) is affected by GHSA-gvwx-54wh-qm9j Dependencies (osv-scanner)
medium osv/GHSA-h67p-54hq-rp68 yarn.lock [email protected] (npm) is affected by GHSA-h67p-54hq-rp68 Dependencies (osv-scanner)
medium osv/GHSA-hj48-42vr-x3v9 yarn.lock [email protected] (npm) is affected by GHSA-hj48-42vr-x3v9 Dependencies (osv-scanner)
medium osv/GHSA-j8xg-fqg3-53r7 yarn.lock [email protected] (npm) is affected by GHSA-j8xg-fqg3-53r7 Dependencies (osv-scanner)
medium osv/GHSA-jmqm-f2gx-4fjv yarn.lock [email protected] (npm) is affected by GHSA-jmqm-f2gx-4fjv Dependencies (osv-scanner)
medium osv/GHSA-mh29-5h37-fv8m yarn.lock [email protected] (npm) is affected by GHSA-mh29-5h37-fv8m Dependencies (osv-scanner)
medium osv/GHSA-p8p7-x288-28g6 yarn.lock [email protected] (npm) is affected by GHSA-p8p7-x288-28g6 Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-p9pc-299p-vxgp yarn.lock [email protected] (npm) is affected by GHSA-p9pc-299p-vxgp Dependencies (osv-scanner)
medium osv/GHSA-pc5p-h8pf-mvwp yarn.lock [email protected] (npm) is affected by GHSA-pc5p-h8pf-mvwp Dependencies (osv-scanner)
medium osv/GHSA-pfrx-2q88-qq97 yarn.lock [email protected] (npm) is affected by GHSA-pfrx-2q88-qq97 Dependencies (osv-scanner)
medium osv/GHSA-q2c6-c6pm-g3gh yarn.lock [email protected] (npm) is affected by GHSA-q2c6-c6pm-g3gh Dependencies (osv-scanner)
medium osv/GHSA-q2hr-2g5m-vwhr yarn.lock [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr Dependencies (osv-scanner)
medium osv/GHSA-rmvr-2pp2-xj38 yarn.lock @octokit/[email protected] (npm) is affected by GHSA-rmvr-2pp2-xj38 Dependencies (osv-scanner)
medium osv/GHSA-v88g-cgmw-v5xw yarn.lock [email protected] (npm) is affected by GHSA-v88g-cgmw-v5xw Dependencies (osv-scanner)
medium osv/GHSA-vcc3-ghjq-m6fr yarn.lock [email protected] (npm) is affected by GHSA-vcc3-ghjq-m6fr Dependencies (osv-scanner)
medium osv/GHSA-vfrc-7r7c-w9mx yarn.lock [email protected] (npm) is affected by GHSA-vfrc-7r7c-w9mx Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vh95-rmgr-6w4m yarn.lock [email protected] (npm) is affected by GHSA-vh95-rmgr-6w4m Dependencies (osv-scanner)
medium osv/GHSA-vmf3-w455-68vh yarn.lock [email protected] (npm) is affected by GHSA-vmf3-w455-68vh Dependencies (osv-scanner)
medium osv/GHSA-w8wr-v893-vjvp yarn.lock [email protected] (npm) is affected by GHSA-w8wr-v893-vjvp Dependencies (osv-scanner)
medium osv/GHSA-xf5p-87ch-gxw2 yarn.lock [email protected] (npm) is affected by GHSA-xf5p-87ch-gxw2 Dependencies (osv-scanner)
medium osv/GHSA-xw65-4hp5-5hc7 yarn.lock [email protected] (npm) is affected by GHSA-xw65-4hp5-5hc7 Dependencies (osv-scanner)
medium osv/GHSA-xx4v-prfh-6cgc yarn.lock @octokit/[email protected] (npm) is affected by GHSA-xx4v-prfh-6cgc Dependencies (osv-scanner)
medium osv/GHSA-xxjr-mmjv-4gpg yarn.lock [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg Dependencies (osv-scanner)
medium osv/MAL-2023-462 yarn.lock [email protected] (npm) is affected by MAL-2023-462 Dependencies (osv-scanner)
low opengrep/javascript.lang.correctness.useless-assignment tools/gh-pages-publish.ts:1 `const` is assigned twice; the first assignment is useless Lint
low gitleaks/generic-api-key .coveralls.yml:1 Possible generic-api-key secret in the current tree Secrets (gitleaks)
low osv/GHSA-442j-39wm-28r2 yarn.lock [email protected] (npm) is affected by GHSA-442j-39wm-28r2 Dependencies (osv-scanner)
low osv/GHSA-4x5r-pxfx-6jf8 yarn.lock @babel/[email protected] (npm) is affected by GHSA-4x5r-pxfx-6jf8 Dependencies (osv-scanner)
low osv/GHSA-52f5-9888-hmc6 yarn.lock [email protected] (npm) is affected by GHSA-52f5-9888-hmc6 Dependencies (osv-scanner)
low osv/GHSA-73rr-hh4g-fpgx yarn.lock [email protected] (npm) is affected by GHSA-73rr-hh4g-fpgx Dependencies (osv-scanner)
low osv/GHSA-73rr-hh4g-fpgx yarn.lock [email protected] (npm) is affected by GHSA-73rr-hh4g-fpgx Dependencies (osv-scanner)
low osv/GHSA-gxpj-cx7g-858c yarn.lock [email protected] (npm) is affected by GHSA-gxpj-cx7g-858c Dependencies (osv-scanner)
low osv/GHSA-gxpj-cx7g-858c yarn.lock [email protected] (npm) is affected by GHSA-gxpj-cx7g-858c Dependencies (osv-scanner)
low osv/GHSA-v6h2-p8h4-qcjw yarn.lock [email protected] (npm) is affected by GHSA-v6h2-p8h4-qcjw Dependencies (osv-scanner)
low osv/GHSA-w7rc-rwvf-8q5r yarn.lock [email protected] (npm) is affected by GHSA-w7rc-rwvf-8q5r Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4141
Tests and CICode qualityok—0
Type safetyCode qualityok—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.1191
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4149
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.11

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-1496325e643ec5prov-5+qual-2+sec-20%7654
2026-11-1496325e643ec5prov-4+qual-2+sec-20%7654

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/phodal/mooa/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/phodal/mooa/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/phodal/mooa/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/phodal/mooa/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/phodal/mooa/security.svg)](https://repotrust.synapticcyber.com/r/github.com/phodal/mooa/)
Full text report
  • Repository: https://github.com/phodal/mooa
  • Commit: 96325e643ec54b47670c469c4ce2f4cd15f7a1fc
  • Generated: 2026-11-14T14:52:06+00:00
  • Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 76 adequate 90% 100%
Security 54 weak 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%

  • Unattributed share in AI-consistent velocity bursts: 0.0%

  • Estimated AI-generated share: 0.0%

  • Stylometry index: 0.19 per 1,000 lines (narrated steps 1, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.

Month Lines added Attributed to AI
2018-03 6,028 0%
2018-04 3,033 0%
2018-11 18 0%
2019-06 7 0%

Evidence

  • step-by-step narration comment: // First, initialize the Angular testing environment. (examples/src)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.23, CI runs tests; 6% of function code in complex or long functions; 5% duplicated lines. Weakest area: type safety.

Area Score
Complexity (lizard) 83
Duplication 72
Code smells (Opengrep) 99
Tests and CI 68
Documentation 65
Type safety 60
Process (Scorecard review/maintenance) n/a
  • Functions: 8,430; mean complexity 2.2, 90th percentile 4; 56 complex and 2 long functions
  • Duplicated lines: 5.4% of 3,773 compared
  • Tests: 1,225 test lines for 5,331 source lines (ratio 0.23); CI test commands: npm run test; 5% of recent source commits also change tests
  • Docs missing or thin: contributing, changelog

Most complex functions:

Security

Security posture is weak: 191 known vulnerabilities in 92 dependencies; 5 high-severity SAST findings. Weakest area: dependencies.

Area Score
Secrets (gitleaks, tree + history) 97
Static analysis (Opengrep) 73
Vulnerable dependencies (OSV) 0
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 20
OpenSSF Scorecard n/a

  • Known vulnerabilities: 191 in 92 packages (critical 23, high 96, medium 49, low 9)

  • Posture checks passed: signed commits, lockfiles; missing: security policy, dependency updates

Top findings

Severity Finding Location
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 deploy/yarn.lock
critical osv/GHSA-67hx-6x53-jw92: @babel/[email protected] (npm) is affected by GHSA-67hx-6x53-jw92 yarn.lock
critical osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 yarn.lock
critical osv/GHSA-8r6j-v8pm-fqw3: [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 yarn.lock
critical osv/GHSA-2w6w-674q-4c4q: [email protected] (npm) is affected by GHSA-2w6w-674q-4c4q yarn.lock
critical osv/GHSA-765h-qjxv-5f44: [email protected] (npm) is affected by GHSA-765h-qjxv-5f44 yarn.lock
critical osv/GHSA-8r5x-fm3f-whwj: [email protected] (npm) is affected by GHSA-8r5x-fm3f-whwj yarn.lock
critical osv/GHSA-f2jv-r9rf-7988: [email protected] (npm) is affected by GHSA-f2jv-r9rf-7988 yarn.lock
critical osv/GHSA-p8wg-vrv2-v86f: [email protected] (npm) is affected by GHSA-p8wg-vrv2-v86f yarn.lock
critical osv/GHSA-w457-6q6x-cgp9: [email protected] (npm) is affected by GHSA-w457-6q6x-cgp9 yarn.lock
critical osv/GHSA-896r-f27r-55mw: [email protected] (npm) is affected by GHSA-896r-f27r-55mw yarn.lock
critical osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h yarn.lock
critical osv/GHSA-fhjf-83wg-r2j9: [email protected] (npm) is affected by GHSA-fhjf-83wg-r2j9 yarn.lock
critical osv/GHSA-6fw4-hr69-g3rv: [email protected] (npm) is affected by GHSA-6fw4-hr69-g3rv yarn.lock
critical osv/GHSA-4g88-fppr-53pp: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp yarn.lock
critical osv/GHSA-4g88-fppr-53pp: [email protected] (npm) is affected by GHSA-4g88-fppr-53pp yarn.lock
critical osv/GHSA-9w5j-4mwv-2wj8: [email protected] (npm) is affected by GHSA-9w5j-4mwv-2wj8 yarn.lock
critical osv/GHSA-hffm-xvc3-vprc: [email protected] (npm) is affected by GHSA-hffm-xvc3-vprc yarn.lock
critical osv/GHSA-23hp-3jrh-7fpw: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw yarn.lock
critical osv/GHSA-j7fq-p9q7-5wfv: [email protected] (npm) is affected by GHSA-j7fq-p9q7-5wfv yarn.lock
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/helper/dom.utils.ts:96
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a iframeEl.contentWindow.document.head.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/helper/dom.utils.ts:96

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 5,331; test lines: 1,225
Language Lines
TypeScript 3,427
JavaScript 3,118
Python 11