plietar/librespot

• Repository: https://github.com/plietar/librespot
• Commit: 8971d3aa6864469a79c2640bb2afaf41c3d3728d
• Generated: 2026-11-13T23:30:29+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

No AI attribution or AI-consistent velocity signals detected.

• Explicitly attributed share (lower bound): 0.0%
• Unattributed share in AI-consistent velocity bursts: 0.0%
• Estimated AI-generated share: 0.0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 8% of function code in complex or long functions; 1% duplicated lines. Weakest area: testing.

• Functions: 289; mean complexity 2.1, 90th percentile 4; 2 complex and 1 long functions
• Duplicated lines: 1.1% of 3,265 compared
• Tests: 0 test lines for 5,423 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• handle_frame in src/spirc.rs: complexity 21, 89 lines
• handle_command in src/player.rs: complexity 20, 82 lines
• in src/main.rs: complexity 3, 101 lines

Security

Security posture is weak: 0 possible secret(s) in the tree, 1 only in history; 27 known vulnerabilities in 20 dependencies; 1 high-severity SAST findings. Weakest area: posture.

• Known vulnerabilities: 27 in 20 packages (critical 3, high 3, medium 6, low 1)

• Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 5,423; test lines: 0

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/plietar/librespot/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/plietar/librespot/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/plietar/librespot/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/plietar/librespot/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/plietar/librespot/security.svg)](https://repotrust.synapticcyber.com/r/github.com/plietar/librespot/)