Leaderboard github.com
rbarkoch/Dialedger
A conversation tracking tool that unifies emails, meetings, notes, and files into organized threads.
unreviewed-ai-risk
AI provenance
32%
explicit
- Confidence
- 80%
- Coverage
- 100%
Estimated share of AI-generated code. Explicit attribution is a lower bound.
Code quality
41/100
poor
- Confidence
- 90%
- Coverage
- 100%
Complexity, duplication, lint density, tests, CI, docs and review process.
Security
41/100
poor
- Confidence
- 85%
- Coverage
- 100%
Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.
AI provenance
32% explicit
Explicit AI attribution on 31% of first-party code added; an estimated 31% including velocity signals.
How the score is built
- Explicitly attributed share31%
- Unattributed share in AI-pace bursts0%
- Estimated AI-generated share31%
- AI tool configuration files0
- Work sessions at AI pace0
- Releases at AI pace0
- Coding-style index (1.0+ means possible)0.84
Attributed AI tools
| Tool | Commits | Lines added | First seen | Last seen |
|---|---|---|---|---|
| Claude Code | 7 | 1,420 | 2026-01-15 | 2026-01-21 |
Lines added per month all AI-attributed share
- 2025-112,182 · 0% AI
- 2026-012,331 · 61% AI
Findings in AI-attributed lines vs the rest
From git blame: 1,346 lines trace to AI-attributed commits, 2,806 to others. Reported, not scored.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Code quality | 2.23 | 3.21 | 0.70× |
| Security | 0.74 | 8.91 | 0.08× |
Evidence by analyzer
Explicit AI attributionok8 items
- Claude Code: 7 attributed commits, 1,420 lines added
- Claude Code: trailer 'Co-authored-by: Claude'
- Claude Code: trailer 'Co-authored-by: Claude'
- Claude Code: trailer 'Co-authored-by: Claude'
- Claude Code: on merged branch (424e754faf)
- Claude Code: author email [email protected]
- Claude Code: author email [email protected]
- Claude Code: author email [email protected]
- attributed_commit_share
- 16.7%
- attributed_commits
- 7
- attributed_loc
- 1,420
- attributed_loc_share
- 31.5%
- commits
- 42
- effective_loc
- 4,513
- tools_detected
- 1
AI tool configurationok
- artifacts
- 0
- tools_configured
- 0
- workflow_agents
- 0
Commit velocityok
- excluded_import_loc
- 0
- flagged_loc
- 0
- flagged_loc_share
- 0.0%
- flagged_units
- 0
- max_loc_per_hour
- 484
- measured_loc
- 4,513
- median_loc_per_hour
- 254.38
- pr_timed_units
- 3
- pre_ai_era_burst_loc
- 0
- pre_ai_era_bursts
- 0
- pre_ai_era_measured_loc
- 0
- work_units
- 9
Release velocityok
- flagged_releases
- 0
- max_loc_per_day
- 760.10
- releases
- 4
Coding styleok1 item
- count:assistant_voice
- 0
- count:emoji_in_code
- 5
- count:narrated_steps
- 1
- count:placeholder
- 0
- files:assistant_voice
- 0
- files:emoji_in_code
- 2
- files:narrated_steps
- 1
- files:placeholder
- 0
- index
- 0.84
- lines_scanned
- 4,152
- per_kloc:assistant_voice
- 0
- per_kloc:emoji_in_code
- 1.20
- per_kloc:narrated_steps
- 0.24
- per_kloc:placeholder
- 0
Findings in AI-written linesok
- ai_lines
- 1,346
- blame_failures
- 0
- files_blamed
- 16
- other_lines
- 2,806
- quality:ai_findings
- 3
- quality:ai_per_kloc
- 2.23
- quality:other_findings
- 9
- quality:other_per_kloc
- 3.21
- quality:ratio
- 0.70
- security:ai_findings
- 1
- security:ai_per_kloc
- 0.74
- security:other_findings
- 25
- security:other_per_kloc
- 8.91
- security:ratio
- 0.08
Code quality
41 poor
Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 17% of function code in complex or long functions; 18% duplicated lines. Weakest area: testing.
How the score is built
- Complexity60
- Duplication33
- Lint and smells49
- Tests and CI15
- Documentation65
- Type safetynot measured
- Review processnot measured
Evidence by analyzer
Complexity (lizard)ok5 items
- getEntryPreview in src/components/SearchBar.jsx: complexity 67, 105 lines
- renderEntryContent in src/components/EntryList.jsx: complexity 38, 100 lines
- EntryForm in src/components/EntryForm.jsx: complexity 25, 80 lines
- handleSubmit in src/components/EntryForm.jsx: complexity 24, 115 lines
- renderTypeSpecificFields in src/components/EntryForm.jsx: complexity 10, 154 lines
- complex_functions
- 4
- function_nloc
- 3,288
- functions
- 301
- long_functions
- 3
- many_param_functions
- 0
- mean_ccn
- 2.74
- p90_ccn
- 5
- risky_nloc_share
- 16.9%
Duplication (jscpd)ok6 items
- 6+ duplicated lines: database.js:18 and server/database.js:17
- 6+ duplicated lines: database.js:32 and database.js:86
- 6+ duplicated lines: main.js:89 and server/index.js:137
- 6+ duplicated lines: src/components/EntryForm.jsx:635 and src/components/EntryList.jsx:320
- 6+ duplicated lines: src/components/EntryList.jsx:9 and src/components/EntrySidebar.jsx:8
- 6+ duplicated lines: src/components/ThreadView.jsx:135 and src/components/ThreadView.jsx:162
- compared_lines
- 2,987
- duplicated_lines
- 549
- duplicated_share
- 18.4%
- files
- 16
Lintok
- category:best-practice
- 12
- findings
- 12
- scanned_lines
- 4,152
- weighted_findings
- 12
Tests and CIok1 item
- CI config: .github/workflows/release.yml
.github/workflows/release.yml
- check:ci_present
- yes
- check:ci_runs_lint
- no
- check:ci_runs_tests
- no
- check:has_tests
- no
- check:test_ratio
- no
- check:tests_cochange
- no
- ci_files
- 1
- cochange_commits
- 25
- cochange_share
- 0.0%
- source_lines
- 4,152
- test_lines
- 0
- test_ratio
- 0
Documentationok2 items
- README.md
README.md - LICENSE.txt
LICENSE.txt
- check:changelog
- no
- check:contributing
- no
- check:license
- yes
- check:readme
- yes
- readme_lines
- 124
Type safetyskipped
Security
41 poor
Security posture is poor: 229 known vulnerabilities in 42 dependencies; 1 high-severity SAST findings; 12 high-severity workflow issues. Weakest area: posture.
How the score is built
- Secrets100
- Static analysis (SAST)52
- Vulnerable dependencies1
- CI workflows10
- Security posture0
- OpenSSF Scorecardnot measured
Evidence by analyzer
OpenSSF Scorecardskipped
no published OpenSSF Scorecard result for this repo
Package registriesok
- checked
- 20
- declared
- 20
- lookup_errors
- 0
- missing
- 0
- recent
- 0
Secrets (gitleaks)ok
- secrets_current
- 0
- secrets_history
- 0
- secrets_low_confidence
- 0
- secrets_nonprod
- 0
Static analysis (opengrep)ok
- findings
- 27
- findings_high
- 1
- findings_low
- 3
- findings_medium
- 23
- parse_errors
- 0
- scanned_lines
- 4,152
- weighted_findings
- 7.74
Dependencies (osv-scanner)ok
- penalty
- 303
- vulnerabilities
- 229
- vulnerable_packages
- 42
- vulns_critical
- 3
- vulns_high
- 110
- vulns_low
- 18
- vulns_medium
- 98
- vulns_unknown
- 0
CI workflows (zizmor)ok
- findings
- 17
- findings_high
- 12
- findings_low
- 2
- findings_medium
- 3
- penalty
- 139.20
- workflows
- 1
Security postureok
- check:dependency_updates
- no
- check:lockfiles
- yes
- check:security_policy
- no
- check:signed_commits
- no
- signed_commit_share
- 14.3%
- unpinned_manifests
- 0
Release downloadsok5 items
- release 1.3.0 ships Dialedger-1.3.0-arm64.dmg (5 downloads)
- release 1.3.0 ships Dialedger-1.3.0.AppImage (5 downloads)
- release 1.3.0 ships Dialedger.1.3.0.exe (4 downloads)
- release 1.3.0 ships Dialedger.Setup.1.3.0.exe (3 downloads)
- release 1.2.0 ships Dialedger-1.2.0-arm64.dmg (2 downloads)
- binary_assets
- 20
- signals
- 1
- suspicious
- 0
Findings
3 critical123 high136 medium21 low2 info
285 findings
| Severity | Rule | Location | Message | Tool |
|---|---|---|---|---|
| critical | osv/GHSA-23hp-3jrh-7fpw |
package-lock.json | [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw | Dependencies (osv-scanner) |
| critical | osv/GHSA-jqcg-44mw-7w3h |
package-lock.json | [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h | Dependencies (osv-scanner) |
| critical | osv/GHSA-w7jw-789q-3m8p |
package-lock.json | [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p | Dependencies (osv-scanner) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:105 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:121 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:132 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:147 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:21 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:38 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/excessive-permissions |
.github/workflows/release.yml:4 | overly broad permissions [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:45 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/excessive-permissions |
.github/workflows/release.yml:5 | overly broad permissions [confidence high] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:69 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | zizmor/cache-poisoning |
.github/workflows/release.yml:80 | runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low] | CI workflows (zizmor) |
| high | zizmor/unpinned-uses |
.github/workflows/release.yml:80 | unpinned action reference [confidence high] | CI workflows (zizmor) |
| high | opengrep/dockerfile.security.missing-user |
Dockerfile:62 | By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile... | Static analysis (opengrep) |
| high | osv/GHSA-22p9-wv53-3rq4 |
package-lock.json | [email protected] (npm) is affected by GHSA-22p9-wv53-3rq4 | Dependencies (osv-scanner) |
| high | osv/GHSA-23c5-xmqv-rm74 |
package-lock.json | [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 | Dependencies (osv-scanner) |
| high | osv/GHSA-23c5-xmqv-rm74 |
package-lock.json | [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 | Dependencies (osv-scanner) |
| high | osv/GHSA-23c5-xmqv-rm74 |
package-lock.json | [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 | Dependencies (osv-scanner) |
| high | osv/GHSA-27p8-2357-5qqv |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-27p8-2357-5qqv | Dependencies (osv-scanner) |
| high | osv/GHSA-27r3-jxmh-p828 |
package-lock.json | [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 | Dependencies (osv-scanner) |
| high | osv/GHSA-2883-xcg3-v3hh |
package-lock.json | [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh | Dependencies (osv-scanner) |
| high | osv/GHSA-28wg-ghj8-5hjv |
package-lock.json | [email protected] (npm) is affected by GHSA-28wg-ghj8-5hjv | Dependencies (osv-scanner) |
| high | osv/GHSA-2v35-w6hq-6mfw |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-2v35-w6hq-6mfw | Dependencies (osv-scanner) |
| high | osv/GHSA-2v37-7h3g-55p8 |
package-lock.json | [email protected] (npm) is affected by GHSA-2v37-7h3g-55p8 | Dependencies (osv-scanner) |
| high | osv/GHSA-2x7j-588g-ccc2 |
package-lock.json | [email protected] (npm) is affected by GHSA-2x7j-588g-ccc2 | Dependencies (osv-scanner) |
| high | osv/GHSA-34x7-hfp2-rc4v |
package-lock.json | [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v | Dependencies (osv-scanner) |
| high | osv/GHSA-35jp-ww65-95wh |
package-lock.json | [email protected] (npm) is affected by GHSA-35jp-ww65-95wh | Dependencies (osv-scanner) |
| high | osv/GHSA-37ch-88jc-xwx2 |
package-lock.json | [email protected] (npm) is affected by GHSA-37ch-88jc-xwx2 | Dependencies (osv-scanner) |
| high | osv/GHSA-395f-4hp3-45gv |
package-lock.json | [email protected] (npm) is affected by GHSA-395f-4hp3-45gv | Dependencies (osv-scanner) |
| high | osv/GHSA-3g43-6gmg-66jw |
package-lock.json | [email protected] (npm) is affected by GHSA-3g43-6gmg-66jw | Dependencies (osv-scanner) |
| high | osv/GHSA-3jxr-9vmj-r5cp |
package-lock.json | [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp | Dependencies (osv-scanner) |
| high | osv/GHSA-3jxr-9vmj-r5cp |
package-lock.json | [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp | Dependencies (osv-scanner) |
| high | osv/GHSA-3ppc-4f35-3m26 |
package-lock.json | [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 | Dependencies (osv-scanner) |
| high | osv/GHSA-3ppc-4f35-3m26 |
package-lock.json | [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 | Dependencies (osv-scanner) |
| high | osv/GHSA-3ppc-4f35-3m26 |
package-lock.json | [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 | Dependencies (osv-scanner) |
| high | osv/GHSA-3pq3-5fj3-cg6v |
package-lock.json | [email protected] (npm) is affected by GHSA-3pq3-5fj3-cg6v | Dependencies (osv-scanner) |
| high | osv/GHSA-43fc-jf86-j433 |
package-lock.json | [email protected] (npm) is affected by GHSA-43fc-jf86-j433 | Dependencies (osv-scanner) |
| high | osv/GHSA-44fp-w29j-9vj5 |
package-lock.json | [email protected] (npm) is affected by GHSA-44fp-w29j-9vj5 | Dependencies (osv-scanner) |
| high | osv/GHSA-4528-x5fx-h6hg |
package-lock.json | [email protected] (npm) is affected by GHSA-4528-x5fx-h6hg | Dependencies (osv-scanner) |
| high | osv/GHSA-4pg4-qvpc-4q3h |
package-lock.json | [email protected] (npm) is affected by GHSA-4pg4-qvpc-4q3h | Dependencies (osv-scanner) |
| high | osv/GHSA-4w3w-2rp5-g8jm |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-4w3w-2rp5-g8jm | Dependencies (osv-scanner) |
| high | osv/GHSA-52cp-r559-cp3m |
package-lock.json | [email protected] (npm) is affected by GHSA-52cp-r559-cp3m | Dependencies (osv-scanner) |
| high | osv/GHSA-532v-xpq5-8h95 |
package-lock.json | [email protected] (npm) is affected by GHSA-532v-xpq5-8h95 | Dependencies (osv-scanner) |
| high | osv/GHSA-535w-7cp7-47q4 |
package-lock.json | [email protected] (npm) is affected by GHSA-535w-7cp7-47q4 | Dependencies (osv-scanner) |
| high | osv/GHSA-542g-h47m-68v8 |
package-lock.json | [email protected] (npm) is affected by GHSA-542g-h47m-68v8 | Dependencies (osv-scanner) |
| high | osv/GHSA-5528-5vmv-3xc2 |
package-lock.json | [email protected] (npm) is affected by GHSA-5528-5vmv-3xc2 | Dependencies (osv-scanner) |
| high | osv/GHSA-587h-7wmj-h5pm |
package-lock.json | [email protected] (npm) is affected by GHSA-587h-7wmj-h5pm | Dependencies (osv-scanner) |
| high | osv/GHSA-5p4m-2wfm-xmqj |
package-lock.json | [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj | Dependencies (osv-scanner) |
| high | osv/GHSA-62hf-57xw-28j9 |
package-lock.json | [email protected] (npm) is affected by GHSA-62hf-57xw-28j9 | Dependencies (osv-scanner) |
| high | osv/GHSA-68fv-2mgg-jv7q |
package-lock.json | [email protected] (npm) is affected by GHSA-68fv-2mgg-jv7q | Dependencies (osv-scanner) |
| high | osv/GHSA-6chq-wfr3-2hj9 |
package-lock.json | [email protected] (npm) is affected by GHSA-6chq-wfr3-2hj9 | Dependencies (osv-scanner) |
| high | osv/GHSA-6g55-p6wh-862q |
package-lock.json | [email protected] (npm) is affected by GHSA-6g55-p6wh-862q | Dependencies (osv-scanner) |
| high | osv/GHSA-6h2x-m376-mqjq |
package-lock.json | [email protected] (npm) is affected by GHSA-6h2x-m376-mqjq | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
package-lock.json | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
package-lock.json | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-72gw-mp4g-v24j |
package-lock.json | [email protected] (npm) is affected by GHSA-72gw-mp4g-v24j | Dependencies (osv-scanner) |
| high | osv/GHSA-73wf-gq98-2v4g |
package-lock.json | [email protected] (npm) is affected by GHSA-73wf-gq98-2v4g | Dependencies (osv-scanner) |
| high | osv/GHSA-777c-7fjr-54vf |
package-lock.json | [email protected] (npm) is affected by GHSA-777c-7fjr-54vf | Dependencies (osv-scanner) |
| high | osv/GHSA-7g7r-gx96-252g |
package-lock.json | [email protected] (npm) is affected by GHSA-7g7r-gx96-252g | Dependencies (osv-scanner) |
| high | osv/GHSA-7pqw-9j4j-h8q3 |
package-lock.json | [email protected] (npm) is affected by GHSA-7pqw-9j4j-h8q3 | Dependencies (osv-scanner) |
| high | osv/GHSA-7r86-cg39-jmmj |
package-lock.json | [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj | Dependencies (osv-scanner) |
| high | osv/GHSA-7r86-cg39-jmmj |
package-lock.json | [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj | Dependencies (osv-scanner) |
| high | osv/GHSA-7r86-cg39-jmmj |
package-lock.json | [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj | Dependencies (osv-scanner) |
| high | osv/GHSA-8337-3p73-46f4 |
package-lock.json | [email protected] (npm) is affected by GHSA-8337-3p73-46f4 | Dependencies (osv-scanner) |
| high | osv/GHSA-8344-3jmq-59r6 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-8344-3jmq-59r6 | Dependencies (osv-scanner) |
| high | osv/GHSA-83g3-92jg-28cx |
package-lock.json | [email protected] (npm) is affected by GHSA-83g3-92jg-28cx | Dependencies (osv-scanner) |
| high | osv/GHSA-8qq5-rm4j-mr97 |
package-lock.json | [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 | Dependencies (osv-scanner) |
| high | osv/GHSA-8x88-c5mf-7j5w |
package-lock.json | [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w | Dependencies (osv-scanner) |
| high | osv/GHSA-93r5-fhx6-vmg9 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-93r5-fhx6-vmg9 | Dependencies (osv-scanner) |
| high | osv/GHSA-965w-775f-mr7g |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-965w-775f-mr7g | Dependencies (osv-scanner) |
| high | osv/GHSA-9f4c-93c8-jc8g |
package-lock.json | [email protected] (npm) is affected by GHSA-9f4c-93c8-jc8g | Dependencies (osv-scanner) |
| high | osv/GHSA-9ppj-qmqm-q256 |
package-lock.json | [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 | Dependencies (osv-scanner) |
| high | osv/GHSA-9qh4-3jw8-366w |
package-lock.json | [email protected] (npm) is affected by GHSA-9qh4-3jw8-366w | Dependencies (osv-scanner) |
| high | osv/GHSA-9wfr-w7mm-pc7f |
package-lock.json | [email protected] (npm) is affected by GHSA-9wfr-w7mm-pc7f | Dependencies (osv-scanner) |
| high | osv/GHSA-c2c7-rcm5-vvqj |
package-lock.json | [email protected] (npm) is affected by GHSA-c2c7-rcm5-vvqj | Dependencies (osv-scanner) |
| high | osv/GHSA-c7q8-3ch8-vqpv |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-c7q8-3ch8-vqpv | Dependencies (osv-scanner) |
| high | osv/GHSA-c83g-rgw3-j3cx |
package-lock.json | [email protected] (npm) is affected by GHSA-c83g-rgw3-j3cx | Dependencies (osv-scanner) |
| high | osv/GHSA-f6ww-3ggp-fr8h |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-f6ww-3ggp-fr8h | Dependencies (osv-scanner) |
| high | osv/GHSA-fjgf-rc76-4x9p |
package-lock.json | [email protected] (npm) is affected by GHSA-fjgf-rc76-4x9p | Dependencies (osv-scanner) |
| high | osv/GHSA-g5hg-p3ph-g8qg |
package-lock.json | [email protected] (npm) is affected by GHSA-g5hg-p3ph-g8qg | Dependencies (osv-scanner) |
| high | osv/GHSA-gr2m-v5gq-v685 |
package-lock.json | [email protected] (npm) is affected by GHSA-gr2m-v5gq-v685 | Dependencies (osv-scanner) |
| high | osv/GHSA-h7rp-cf8h-j98x |
package-lock.json | [email protected] (npm) is affected by GHSA-h7rp-cf8h-j98x | Dependencies (osv-scanner) |
| high | osv/GHSA-hfxv-24rg-xrqf |
package-lock.json | [email protected] (npm) is affected by GHSA-hfxv-24rg-xrqf | Dependencies (osv-scanner) |
| high | osv/GHSA-hmw2-7cc7-3qxx |
package-lock.json | [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx | Dependencies (osv-scanner) |
| high | osv/GHSA-hq2x-r82h-9wj4 |
package-lock.json | [email protected] (npm) is affected by GHSA-hq2x-r82h-9wj4 | Dependencies (osv-scanner) |
| high | osv/GHSA-j5f8-grm9-p9fc |
package-lock.json | [email protected] (npm) is affected by GHSA-j5f8-grm9-p9fc | Dependencies (osv-scanner) |
| high | osv/GHSA-j759-j44w-7fr8 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-j759-j44w-7fr8 | Dependencies (osv-scanner) |
| high | osv/GHSA-j84w-jfhq-vhvj |
package-lock.json | [email protected] (npm) is affected by GHSA-j84w-jfhq-vhvj | Dependencies (osv-scanner) |
| high | osv/GHSA-jjp3-mq3x-295m |
package-lock.json | [email protected] (npm) is affected by GHSA-jjp3-mq3x-295m | Dependencies (osv-scanner) |
| high | osv/GHSA-jmr9-qjv8-65gv |
package-lock.json | [email protected] (npm) is affected by GHSA-jmr9-qjv8-65gv | Dependencies (osv-scanner) |
| high | osv/GHSA-jr5w-w6x2-84p9 |
package-lock.json | [email protected] (npm) is affected by GHSA-jr5w-w6x2-84p9 | Dependencies (osv-scanner) |
| high | osv/GHSA-mh99-v99m-4gvg |
package-lock.json | [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg | Dependencies (osv-scanner) |
| high | osv/GHSA-mh99-v99m-4gvg |
package-lock.json | [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg | Dependencies (osv-scanner) |
| high | osv/GHSA-mw96-cpmx-2vgc |
package-lock.json | [email protected] (npm) is affected by GHSA-mw96-cpmx-2vgc | Dependencies (osv-scanner) |
| high | osv/GHSA-mwp4-54f8-5fhr |
package-lock.json | [email protected] (npm) is affected by GHSA-mwp4-54f8-5fhr | Dependencies (osv-scanner) |
| high | osv/GHSA-p2f4-r6v6-j797 |
package-lock.json | [email protected] (npm) is affected by GHSA-p2f4-r6v6-j797 | Dependencies (osv-scanner) |
| high | osv/GHSA-p6gq-j5cr-w38f |
package-lock.json | [email protected] (npm) is affected by GHSA-p6gq-j5cr-w38f | Dependencies (osv-scanner) |
| high | osv/GHSA-p92q-9vqr-4j8v |
package-lock.json | [email protected] (npm) is affected by GHSA-p92q-9vqr-4j8v | Dependencies (osv-scanner) |
| high | osv/GHSA-pf86-5x62-jrwf |
package-lock.json | [email protected] (npm) is affected by GHSA-pf86-5x62-jrwf | Dependencies (osv-scanner) |
| high | osv/GHSA-ph9p-34f9-6g65 |
package-lock.json | [email protected] (npm) is affected by GHSA-ph9p-34f9-6g65 | Dependencies (osv-scanner) |
| high | osv/GHSA-pmwg-cvhr-8vh7 |
package-lock.json | [email protected] (npm) is affected by GHSA-pmwg-cvhr-8vh7 | Dependencies (osv-scanner) |
| high | osv/GHSA-q8qp-cvcw-x6jj |
package-lock.json | [email protected] (npm) is affected by GHSA-q8qp-cvcw-x6jj | Dependencies (osv-scanner) |
| high | osv/GHSA-qffp-2rhf-9h96 |
package-lock.json | [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
package-lock.json | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
package-lock.json | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-r28c-9q8g-f849 |
package-lock.json | [email protected] (npm) is affected by GHSA-r28c-9q8g-f849 | Dependencies (osv-scanner) |
| high | osv/GHSA-r292-9mhp-454m |
package-lock.json | [email protected] (npm) is affected by GHSA-r292-9mhp-454m | Dependencies (osv-scanner) |
| high | osv/GHSA-r5fr-rjxr-66jc |
package-lock.json | [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc | Dependencies (osv-scanner) |
| high | osv/GHSA-r6q2-hw4h-h46w |
package-lock.json | [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w | Dependencies (osv-scanner) |
| high | osv/GHSA-r7g4-qg5f-qqm2 |
package-lock.json | [email protected] (npm) is affected by GHSA-r7g4-qg5f-qqm2 | Dependencies (osv-scanner) |
| high | osv/GHSA-rcmh-qjqh-p98v |
package-lock.json | [email protected] (npm) is affected by GHSA-rcmh-qjqh-p98v | Dependencies (osv-scanner) |
| high | osv/GHSA-rgw5-rvv9-x895 |
package-lock.json | [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 | Dependencies (osv-scanner) |
| high | osv/GHSA-rgw5-rvv9-x895 |
package-lock.json | [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 | Dependencies (osv-scanner) |
| high | osv/GHSA-v245-v573-v5vm |
package-lock.json | [email protected] (npm) is affected by GHSA-v245-v573-v5vm | Dependencies (osv-scanner) |
| high | osv/GHSA-v3j7-r9gq-3gjw |
package-lock.json | [email protected] (npm) is affected by GHSA-v3j7-r9gq-3gjw | Dependencies (osv-scanner) |
| high | osv/GHSA-v52c-386h-88mc |
package-lock.json | [email protected] (npm) is affected by GHSA-v52c-386h-88mc | Dependencies (osv-scanner) |
| high | osv/GHSA-v53p-9fqp-m79j |
package-lock.json | [email protected] (npm) is affected by GHSA-v53p-9fqp-m79j | Dependencies (osv-scanner) |
| high | osv/GHSA-w2rr-34g9-rvrj |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-w2rr-34g9-rvrj | Dependencies (osv-scanner) |
| high | osv/GHSA-wc9g-mqfw-jrwm |
package-lock.json | [email protected] (npm) is affected by GHSA-wc9g-mqfw-jrwm | Dependencies (osv-scanner) |
| high | osv/GHSA-wh4c-j3r5-mjhp |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-wh4c-j3r5-mjhp | Dependencies (osv-scanner) |
| high | osv/GHSA-x4fp-j954-r2f4 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-x4fp-j954-r2f4 | Dependencies (osv-scanner) |
| high | osv/GHSA-x6wf-f3px-wcqx |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-x6wf-f3px-wcqx | Dependencies (osv-scanner) |
| high | osv/GHSA-xf7r-hgr6-v32p |
package-lock.json | [email protected] (npm) is affected by GHSA-xf7r-hgr6-v32p | Dependencies (osv-scanner) |
| high | osv/GHSA-xwg4-73v4-xw9w |
package-lock.json | [email protected] (npm) is affected by GHSA-xwg4-73v4-xw9w | Dependencies (osv-scanner) |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:180 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:189 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:206 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:220 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:233 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryForm.jsx:253 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntryList.jsx:34 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-confirm |
src/components/EntryList.jsx:441 | found confirm() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/EntrySidebar.jsx:32 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-confirm |
src/components/ThreadList.jsx:51 | found confirm() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/ThreadView.jsx:100 | found alert() call; should this be in production code? | Lint |
| medium | opengrep/javascript.lang.best-practice.javascript-alert |
src/components/ThreadView.jsx:276 | found alert() call; should this be in production code? | Lint |
| medium | zizmor/artipacked |
.github/workflows/release.yml:121 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:21 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | zizmor/artipacked |
.github/workflows/release.yml:69 | credential persistence through GitHub Actions artifacts [confidence low] | CI workflows (zizmor) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:139 | Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal |
main.js:193 | Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:196 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:196 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:200 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:236 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:253 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:253 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:265 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:266 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:92 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
main.js:93 | Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | osv/GHSA-268h-hp4c-crq3 |
package-lock.json | [email protected] (npm) is affected by GHSA-268h-hp4c-crq3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2g4f-4pwh-qvx6 |
package-lock.json | [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2p8c-gr87-2676 |
package-lock.json | [email protected] (npm) is affected by GHSA-2p8c-gr87-2676 | Dependencies (osv-scanner) |
| medium | osv/GHSA-39m8-27wv-hr27 |
package-lock.json | [email protected] (npm) is affected by GHSA-39m8-27wv-hr27 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3c8v-cfp5-9885 |
package-lock.json | [email protected] (npm) is affected by GHSA-3c8v-cfp5-9885 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3g3m-2fjr-6pw4 |
package-lock.json | [email protected] (npm) is affected by GHSA-3g3m-2fjr-6pw4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3p68-rc4w-qgx5 |
package-lock.json | [email protected] (npm) is affected by GHSA-3p68-rc4w-qgx5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-3v7f-55p6-f55p |
package-lock.json | [email protected] (npm) is affected by GHSA-3v7f-55p6-f55p | Dependencies (osv-scanner) |
| medium | osv/GHSA-3w6x-2g7m-8v23 |
package-lock.json | [email protected] (npm) is affected by GHSA-3w6x-2g7m-8v23 | Dependencies (osv-scanner) |
| medium | osv/GHSA-42h9-826w-cgv3 |
package-lock.json | [email protected] (npm) is affected by GHSA-42h9-826w-cgv3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-445q-vr5w-6q77 |
package-lock.json | [email protected] (npm) is affected by GHSA-445q-vr5w-6q77 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4f78-qhmw-8j8m |
package-lock.json | [email protected] (npm) is affected by GHSA-4f78-qhmw-8j8m | Dependencies (osv-scanner) |
| medium | osv/GHSA-4ffr-jq9g-5ffx |
package-lock.json | [email protected] (npm) is affected by GHSA-4ffr-jq9g-5ffx | Dependencies (osv-scanner) |
| medium | osv/GHSA-4g23-2xm8-66gc |
package-lock.json | [email protected] (npm) is affected by GHSA-4g23-2xm8-66gc | Dependencies (osv-scanner) |
| medium | osv/GHSA-4hqw-qxg8-jxx2 |
package-lock.json | [email protected] (npm) is affected by GHSA-4hqw-qxg8-jxx2 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4mjr-xmp4-gh2g |
package-lock.json | [email protected] (npm) is affected by GHSA-4mjr-xmp4-gh2g | Dependencies (osv-scanner) |
| medium | osv/GHSA-4p4r-m79c-wq3v |
package-lock.json | [email protected] (npm) is affected by GHSA-4p4r-m79c-wq3v | Dependencies (osv-scanner) |
| medium | osv/GHSA-4w7w-66w2-5vf9 |
package-lock.json | [email protected] (npm) is affected by GHSA-4w7w-66w2-5vf9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-5c9j-mhmv-5xgx |
package-lock.json | [email protected] (npm) is affected by GHSA-5c9j-mhmv-5xgx | Dependencies (osv-scanner) |
| medium | osv/GHSA-5c9x-8gcm-mpgx |
package-lock.json | [email protected] (npm) is affected by GHSA-5c9x-8gcm-mpgx | Dependencies (osv-scanner) |
| medium | osv/GHSA-5rqw-r77c-jp79 |
package-lock.json | [email protected] (npm) is affected by GHSA-5rqw-r77c-jp79 | Dependencies (osv-scanner) |
| medium | osv/GHSA-67mh-4wv8-2f99 |
package-lock.json | [email protected] (npm) is affected by GHSA-67mh-4wv8-2f99 | Dependencies (osv-scanner) |
| medium | osv/GHSA-698v-4r3x-3vcv |
package-lock.json | [email protected] (npm) is affected by GHSA-698v-4r3x-3vcv | Dependencies (osv-scanner) |
| medium | osv/GHSA-6gmq-8vp8-gcm6 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-6gmq-8vp8-gcm6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-6h8r-xr42-gp59 |
package-lock.json | @xmldom/[email protected] (npm) is affected by GHSA-6h8r-xr42-gp59 | Dependencies (osv-scanner) |
| medium | osv/GHSA-6pq8-jhm2-2vcw |
package-lock.json | [email protected] (npm) is affected by GHSA-6pq8-jhm2-2vcw | Dependencies (osv-scanner) |
| medium | osv/GHSA-6vj9-mwq6-2f5v |
package-lock.json | [email protected] (npm) is affected by GHSA-6vj9-mwq6-2f5v | Dependencies (osv-scanner) |
| medium | osv/GHSA-7gmj-h9xc-mcxc |
package-lock.json | [email protected] (npm) is affected by GHSA-7gmj-h9xc-mcxc | Dependencies (osv-scanner) |
| medium | osv/GHSA-7q8q-rj6j-mhjq |
package-lock.json | [email protected] (npm) is affected by GHSA-7q8q-rj6j-mhjq | Dependencies (osv-scanner) |
| medium | osv/GHSA-85x2-q946-cp5h |
package-lock.json | [email protected] (npm) is affected by GHSA-85x2-q946-cp5h | Dependencies (osv-scanner) |
| medium | osv/GHSA-898c-q2cr-xwhg |
package-lock.json | [email protected] (npm) is affected by GHSA-898c-q2cr-xwhg | Dependencies (osv-scanner) |
| medium | osv/GHSA-8c8m-p3m8-cjg8 |
package-lock.json | [email protected] (npm) is affected by GHSA-8c8m-p3m8-cjg8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-8m3c-c648-2xjj |
package-lock.json | [email protected] (npm) is affected by GHSA-8m3c-c648-2xjj | Dependencies (osv-scanner) |
| medium | osv/GHSA-8vvx-rff5-p5rq |
package-lock.json | [email protected] (npm) is affected by GHSA-8vvx-rff5-p5rq | Dependencies (osv-scanner) |
| medium | osv/GHSA-997q-gvvc-jwmx |
package-lock.json | [email protected] (npm) is affected by GHSA-997q-gvvc-jwmx | Dependencies (osv-scanner) |
| medium | osv/GHSA-9fr6-4gfg-395g |
package-lock.json | [email protected] (npm) is affected by GHSA-9fr6-4gfg-395g | Dependencies (osv-scanner) |
| medium | osv/GHSA-9pf5-hg6p-4pwp |
package-lock.json | [email protected] (npm) is affected by GHSA-9pf5-hg6p-4pwp | Dependencies (osv-scanner) |
| medium | osv/GHSA-9w97-2464-8783 |
package-lock.json | [email protected] (npm) is affected by GHSA-9w97-2464-8783 | Dependencies (osv-scanner) |
| medium | osv/GHSA-cc9r-2j5m-2m83 |
package-lock.json | [email protected] (npm) is affected by GHSA-cc9r-2j5m-2m83 | Dependencies (osv-scanner) |
| medium | osv/GHSA-f2r8-jv7c-xqmp |
package-lock.json | [email protected] (npm) is affected by GHSA-f2r8-jv7c-xqmp | Dependencies (osv-scanner) |
| medium | osv/GHSA-f3pv-wv63-48x8 |
package-lock.json | [email protected] (npm) is affected by GHSA-f3pv-wv63-48x8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-f886-m6hf-6m8v |
package-lock.json | [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v | Dependencies (osv-scanner) |
| medium | osv/GHSA-f886-m6hf-6m8v |
package-lock.json | [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v | Dependencies (osv-scanner) |
| medium | osv/GHSA-ff2p-hmqr-hxm4 |
package-lock.json | [email protected] (npm) is affected by GHSA-ff2p-hmqr-hxm4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-fvcv-3m26-pcqx |
package-lock.json | [email protected] (npm) is affected by GHSA-fvcv-3m26-pcqx | Dependencies (osv-scanner) |
| medium | osv/GHSA-fw47-9c62-h3vw |
package-lock.json | [email protected] (npm) is affected by GHSA-fw47-9c62-h3vw | Dependencies (osv-scanner) |
| medium | osv/GHSA-fx2h-pf6j-xcff |
package-lock.json | [email protected] (npm) is affected by GHSA-fx2h-pf6j-xcff | Dependencies (osv-scanner) |
| medium | osv/GHSA-fxqj-rqcc-2cmp |
package-lock.json | [email protected] (npm) is affected by GHSA-fxqj-rqcc-2cmp | Dependencies (osv-scanner) |
| medium | osv/GHSA-g3hv-75wg-m249 |
package-lock.json | [email protected] (npm) is affected by GHSA-g3hv-75wg-m249 | Dependencies (osv-scanner) |
| medium | osv/GHSA-g73g-hqqh-jr95 |
package-lock.json | [email protected] (npm) is affected by GHSA-g73g-hqqh-jr95 | Dependencies (osv-scanner) |
| medium | osv/GHSA-gcqx-w48m-w2h4 |
package-lock.json | [email protected] (npm) is affected by GHSA-gcqx-w48m-w2h4 | Dependencies (osv-scanner) |
| medium | osv/GHSA-gvwx-54wh-qm9j |
package-lock.json | [email protected] (npm) is affected by GHSA-gvwx-54wh-qm9j | Dependencies (osv-scanner) |
| medium | osv/GHSA-h3mg-xc3c-68pw |
package-lock.json | [email protected] (npm) is affected by GHSA-h3mg-xc3c-68pw | Dependencies (osv-scanner) |
| medium | osv/GHSA-h67p-54hq-rp68 |
package-lock.json | [email protected] (npm) is affected by GHSA-h67p-54hq-rp68 | Dependencies (osv-scanner) |
| medium | osv/GHSA-j6r3-76f7-8jcv |
package-lock.json | [email protected] (npm) is affected by GHSA-j6r3-76f7-8jcv | Dependencies (osv-scanner) |
| medium | osv/GHSA-j8rh-479h-cp32 |
package-lock.json | [email protected] (npm) is affected by GHSA-j8rh-479h-cp32 | Dependencies (osv-scanner) |
| medium | osv/GHSA-jm7p-cc5g-qwxx |
package-lock.json | [email protected] (npm) is affected by GHSA-jm7p-cc5g-qwxx | Dependencies (osv-scanner) |
| medium | osv/GHSA-jqh4-m9w3-8hp9 |
package-lock.json | [email protected] (npm) is affected by GHSA-jqh4-m9w3-8hp9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-m55f-7gqj-fr98 |
package-lock.json | [email protected] (npm) is affected by GHSA-m55f-7gqj-fr98 | Dependencies (osv-scanner) |
| medium | osv/GHSA-m7pr-hjqh-92cm |
package-lock.json | [email protected] (npm) is affected by GHSA-m7pr-hjqh-92cm | Dependencies (osv-scanner) |
| medium | osv/GHSA-m943-m63m-w62w |
package-lock.json | [email protected] (npm) is affected by GHSA-m943-m63m-w62w | Dependencies (osv-scanner) |
| medium | osv/GHSA-mmx7-hfxf-jppx |
package-lock.json | [email protected] (npm) is affected by GHSA-mmx7-hfxf-jppx | Dependencies (osv-scanner) |
| medium | osv/GHSA-mwf2-3pr3-8698 |
package-lock.json | [email protected] (npm) is affected by GHSA-mwf2-3pr3-8698 | Dependencies (osv-scanner) |
| medium | osv/GHSA-mwmh-mq4g-g6gr |
package-lock.json | [email protected] (npm) is affected by GHSA-mwmh-mq4g-g6gr | Dependencies (osv-scanner) |
| medium | osv/GHSA-p2rr-rvmm-c5fp |
package-lock.json | [email protected] (npm) is affected by GHSA-p2rr-rvmm-c5fp | Dependencies (osv-scanner) |
| medium | osv/GHSA-pmv8-rq9r-6j72 |
package-lock.json | [email protected] (npm) is affected by GHSA-pmv8-rq9r-6j72 | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
package-lock.json | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
package-lock.json | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-q7cg-457f-vx79 |
package-lock.json | [email protected] (npm) is affected by GHSA-q7cg-457f-vx79 | Dependencies (osv-scanner) |
| medium | osv/GHSA-q8mj-m7cp-5q26 |
package-lock.json | [email protected] (npm) is affected by GHSA-q8mj-m7cp-5q26 | Dependencies (osv-scanner) |
| medium | osv/GHSA-qx2v-qp2m-jg93 |
package-lock.json | [email protected] (npm) is affected by GHSA-qx2v-qp2m-jg93 | Dependencies (osv-scanner) |
| medium | osv/GHSA-r4q5-vmmm-2653 |
package-lock.json | [email protected] (npm) is affected by GHSA-r4q5-vmmm-2653 | Dependencies (osv-scanner) |
| medium | osv/GHSA-r5p7-gp4j-qhrx |
package-lock.json | [email protected] (npm) is affected by GHSA-r5p7-gp4j-qhrx | Dependencies (osv-scanner) |
| medium | osv/GHSA-r825-w8mm-5pxw |
package-lock.json | [email protected] (npm) is affected by GHSA-r825-w8mm-5pxw | Dependencies (osv-scanner) |
| medium | osv/GHSA-rpw4-54j3-4h4q |
package-lock.json | [email protected] (npm) is affected by GHSA-rpw4-54j3-4h4q | Dependencies (osv-scanner) |
| medium | osv/GHSA-rq7h-c2jc-7f22 |
package-lock.json | [email protected] (npm) is affected by GHSA-rq7h-c2jc-7f22 | Dependencies (osv-scanner) |
| medium | osv/GHSA-rxp7-6hxx-x8q5 |
package-lock.json | [email protected] (npm) is affected by GHSA-rxp7-6hxx-x8q5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-v2v4-37r5-5v8g |
package-lock.json | [email protected] (npm) is affected by GHSA-v2v4-37r5-5v8g | Dependencies (osv-scanner) |
| medium | osv/GHSA-v64r-4m7r-3mvq |
package-lock.json | [email protected] (npm) is affected by GHSA-v64r-4m7r-3mvq | Dependencies (osv-scanner) |
| medium | osv/GHSA-v6wh-96g9-6wx3 |
package-lock.json | [email protected] (npm) is affected by GHSA-v6wh-96g9-6wx3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-v93f-fgjr-hjrj |
package-lock.json | [email protected] (npm) is affected by GHSA-v93f-fgjr-hjrj | Dependencies (osv-scanner) |
| medium | osv/GHSA-vf2m-468p-8v99 |
package-lock.json | [email protected] (npm) is affected by GHSA-vf2m-468p-8v99 | Dependencies (osv-scanner) |
| medium | osv/GHSA-vh66-26gq-q6x8 |
package-lock.json | [email protected] (npm) is affected by GHSA-vh66-26gq-q6x8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-vmf3-w455-68vh |
package-lock.json | [email protected] (npm) is affected by GHSA-vmf3-w455-68vh | Dependencies (osv-scanner) |
| medium | osv/GHSA-vmqv-hx8q-j7mg |
package-lock.json | [email protected] (npm) is affected by GHSA-vmqv-hx8q-j7mg | Dependencies (osv-scanner) |
| medium | osv/GHSA-vv43-5jgx-7qv8 |
package-lock.json | [email protected] (npm) is affected by GHSA-vv43-5jgx-7qv8 | Dependencies (osv-scanner) |
| medium | osv/GHSA-vvjj-xcjg-gr5g |
package-lock.json | [email protected] (npm) is affected by GHSA-vvjj-xcjg-gr5g | Dependencies (osv-scanner) |
| medium | osv/GHSA-w5vr-8v7q-w6rv |
package-lock.json | [email protected] (npm) is affected by GHSA-w5vr-8v7q-w6rv | Dependencies (osv-scanner) |
| medium | osv/GHSA-w8wr-v893-vjvp |
package-lock.json | [email protected] (npm) is affected by GHSA-w8wr-v893-vjvp | Dependencies (osv-scanner) |
| medium | osv/GHSA-w9j2-pvgh-6h63 |
package-lock.json | [email protected] (npm) is affected by GHSA-w9j2-pvgh-6h63 | Dependencies (osv-scanner) |
| medium | osv/GHSA-wmmp-3585-3rmp |
package-lock.json | [email protected] (npm) is affected by GHSA-wmmp-3585-3rmp | Dependencies (osv-scanner) |
| medium | osv/GHSA-wqvq-jvpq-h66f |
package-lock.json | [email protected] (npm) is affected by GHSA-wqvq-jvpq-h66f | Dependencies (osv-scanner) |
| medium | osv/GHSA-wr44-6hxh-3jwq |
package-lock.json | [email protected] (npm) is affected by GHSA-wr44-6hxh-3jwq | Dependencies (osv-scanner) |
| medium | osv/GHSA-x562-297c-g43g |
package-lock.json | [email protected] (npm) is affected by GHSA-x562-297c-g43g | Dependencies (osv-scanner) |
| medium | osv/GHSA-xj5x-m3f3-5x3h |
package-lock.json | [email protected] (npm) is affected by GHSA-xj5x-m3f3-5x3h | Dependencies (osv-scanner) |
| medium | osv/GHSA-xwr5-m59h-vwqr |
package-lock.json | [email protected] (npm) is affected by GHSA-xwr5-m59h-vwqr | Dependencies (osv-scanner) |
| medium | osv/GHSA-xx6v-rp6x-q39c |
package-lock.json | [email protected] (npm) is affected by GHSA-xx6v-rp6x-q39c | Dependencies (osv-scanner) |
| medium | osv/GHSA-xxjr-mmjv-4gpg |
package-lock.json | [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg | Dependencies (osv-scanner) |
| medium | opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal |
server/database.js:10 | Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/database.js:13 | Detected that function argument `dataPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/database.js:14 | Detected that function argument `dataPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:140 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:141 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:204 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:218 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:219 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:233 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename |
server/index.js:237 | Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled... | Static analysis (opengrep) |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-regexp |
src/components/SearchBar.jsx:117 | RegExp() called with a `searchQuery` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to... | Static analysis (opengrep) |
| low | osv/GHSA-3qxv-5xgr-q7w9 |
package-lock.json | [email protected] (npm) is affected by GHSA-3qxv-5xgr-q7w9 | Dependencies (osv-scanner) |
| low | osv/GHSA-4x5r-pxfx-6jf8 |
package-lock.json | @babel/[email protected] (npm) is affected by GHSA-4x5r-pxfx-6jf8 | Dependencies (osv-scanner) |
| low | osv/GHSA-6w3j-5fw6-r9vr |
package-lock.json | [email protected] (npm) is affected by GHSA-6w3j-5fw6-r9vr | Dependencies (osv-scanner) |
| low | osv/GHSA-9899-m83m-qhpj |
package-lock.json | [email protected] (npm) is affected by GHSA-9899-m83m-qhpj | Dependencies (osv-scanner) |
| low | osv/GHSA-98mx-cjp9-gchm |
package-lock.json | [email protected] (npm) is affected by GHSA-98mx-cjp9-gchm | Dependencies (osv-scanner) |
| low | osv/GHSA-9jrq-w75r-8gcw |
package-lock.json | [email protected] (npm) is affected by GHSA-9jrq-w75r-8gcw | Dependencies (osv-scanner) |
| low | osv/GHSA-c7w3-x93f-qmm8 |
package-lock.json | [email protected] (npm) is affected by GHSA-c7w3-x93f-qmm8 | Dependencies (osv-scanner) |
| low | osv/GHSA-f37v-82c4-4x64 |
package-lock.json | [email protected] (npm) is affected by GHSA-f37v-82c4-4x64 | Dependencies (osv-scanner) |
| low | osv/GHSA-gg4h-3hg2-grpc |
package-lock.json | [email protected] (npm) is affected by GHSA-gg4h-3hg2-grpc | Dependencies (osv-scanner) |
| low | osv/GHSA-h3v5-h239-pg29 |
package-lock.json | [email protected] (npm) is affected by GHSA-h3v5-h239-pg29 | Dependencies (osv-scanner) |
| low | osv/GHSA-jfqx-fxh3-c62j |
package-lock.json | [email protected] (npm) is affected by GHSA-jfqx-fxh3-c62j | Dependencies (osv-scanner) |
| low | osv/GHSA-pfmc-3mgc-p6fp |
package-lock.json | [email protected] (npm) is affected by GHSA-pfmc-3mgc-p6fp | Dependencies (osv-scanner) |
| low | osv/GHSA-qvfw-j98x-7q72 |
package-lock.json | [email protected] (npm) is affected by GHSA-qvfw-j98x-7q72 | Dependencies (osv-scanner) |
| low | osv/GHSA-v422-hmwv-36x6 |
package-lock.json | [email protected] (npm) is affected by GHSA-v422-hmwv-36x6 | Dependencies (osv-scanner) |
| low | osv/GHSA-vpq2-c234-7xj6 |
package-lock.json | @tootallnate/[email protected] (npm) is affected by GHSA-vpq2-c234-7xj6 | Dependencies (osv-scanner) |
| low | osv/GHSA-w7fw-mjwx-w883 |
package-lock.json | [email protected] (npm) is affected by GHSA-w7fw-mjwx-w883 | Dependencies (osv-scanner) |
| low | osv/GHSA-x8rc-wpg4-grpf |
package-lock.json | [email protected] (npm) is affected by GHSA-x8rc-wpg4-grpf | Dependencies (osv-scanner) |
| low | osv/GHSA-xhjh-pmcv-23jw |
package-lock.json | [email protected] (npm) is affected by GHSA-xhjh-pmcv-23jw | Dependencies (osv-scanner) |
| low | opengrep/javascript.express.security.audit.express-check-csurf-middleware-usage |
server/index.js:9 | A CSRF middleware was not detected in your express application. Ensure you are either using one such as `csurf` or `csrf` (see rule references) and/or you are properly doing CSRF validation in your routes with a token or cookies.... | Static analysis (opengrep) |
| low | opengrep/javascript.lang.security.audit.unsafe-formatstring |
src/components/ThreadView.jsx:275 | Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.... | Static analysis (opengrep) |
| low | opengrep/javascript.lang.security.audit.unsafe-formatstring |
src/components/icons/Icon.jsx:35 | Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string.... | Static analysis (opengrep) |
| info | zizmor/superfluous-actions |
.github/workflows/release.yml:147 | action functionality is already included by the runner [confidence high] | CI workflows (zizmor) |
| info | zizmor/template-injection |
.github/workflows/release.yml:87 | code injection via template expansion [confidence low] | CI workflows (zizmor) |
Tools and coverage
Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.
| Analyzer | Pillar | Status | Version | Findings | Note |
|---|---|---|---|---|---|
| AI tool configuration | AI provenance | ok | signatures-v1 | 0 | |
| Explicit AI attribution | AI provenance | ok | signatures-v1 | 0 | |
| Release velocity | AI provenance | ok | prov-4 | 0 | |
| Coding style | AI provenance | ok | — | 0 | |
| Commit velocity | AI provenance | ok | prov-4 | 0 | |
| Findings in AI-written lines | AI provenance | ok | git-blame | 0 | |
| Complexity (lizard) | Code quality | ok | lizard 1.25.1 | 0 | |
| Documentation | Code quality | ok | — | 0 | |
| Duplication (jscpd) | Code quality | ok | repotrust-dup-w6 | 0 | |
| Lint | Code quality | ok | opengrep 1.33.1; rules f1d2b562b414 | 12 | |
| Tests and CI | Code quality | ok | — | 0 | |
| Type safety | Code quality | skipped | — | 0 | |
| CI workflows (zizmor) | Security | ok | zizmor 1.32.0 | 17 | |
| Dependencies (osv-scanner) | Security | ok | osv-scanner version: 2.7.1 | 229 | |
| Release downloads | Security | ok | — | 0 | |
| Security posture | Security | ok | — | 0 | |
| Package registries | Security | ok | — | 0 | |
| Static analysis (opengrep) | Security | ok | opengrep 1.33.1; rules f1d2b562b414 | 27 | |
| OpenSSF Scorecard | Security | skipped | — | 0 | no published OpenSSF Scorecard result for this repo |
| Secrets (gitleaks) | Security | ok | gitleaks 8.30.1 | 0 |
Score history
Scores from different scoring versions aren't directly comparable.
| Scored | Commit | Scoring | AI provenance | Quality | Security |
|---|---|---|---|---|---|
| 2026-11-14 | 3594418d50b6 | prov-5+qual-2+sec-2 | 32% | 41 | 41 |
| 2026-11-14 | 3594418d50b6 | prov-4+qual-2+sec-2 | 32% | 41 | 41 |
Full text report
- Repository: https://github.com/rbarkoch/Dialedger
- Commit:
3594418d50b697197e56e5f710ff3d489d403a4c - Generated: 2026-11-14T14:52:07+00:00
- Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2
Scores
Unreviewed AI code risk: a large share of this code is explicitly AI-attributed, and its tests or review process are weak while quality or security scores are low.
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 32 | explicit | 80% | 100% |
| Code quality | 41 | poor | 90% | 100% |
| Security | 41 | poor | 85% | 100% |
AI provenance
Explicit AI attribution on 31% of first-party code added; an estimated 31% including velocity signals.
- Explicitly attributed share (lower bound): 31.5%
- Unattributed share in AI-consistent velocity bursts: 0.0%
- Estimated AI-generated share: 31.5%
| AI tool | Attributed commits | Lines added |
|---|---|---|
| Claude Code | 7 | 1,420 |
Current source lines last changed by AI-attributed commits: 1,346 of 4,152.
| Findings per 1,000 lines | AI-attributed | Other | Ratio |
|---|---|---|---|
| Quality | 2.229 | 3.207 | 0.7x |
| Security | 0.743 | 8.909 | 0.08x |
- Stylometry index: 0.84 per 1,000 lines (narrated steps 1, placeholders 0, assistant phrasing 0, emoji 5). Reported as a signal, not scored.
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2025-11 | 2,182 | 0% |
| 2026-01 | 2,331 | 61% |
Evidence
- Claude Code: trailer 'Co-authored-by: Claude' (12a60024748b)
- Claude Code: trailer 'Co-authored-by: Claude' (174d68862c59)
- Claude Code: trailer 'Co-authored-by: Claude' (fb7070eac28f)
- Claude Code: on merged branch (424e754faf) (5d0acdb42e67)
- Claude Code: author email [email protected] (32f1a37a0808)
- Claude Code: author email [email protected] (a55328f4555b)
- Claude Code: author email [email protected] (364972768fc0)
- step-by-step narration comment: // First, find the full thread object if we only have partial info (src/App.jsx:)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 17% of function code in complex or long functions; 18% duplicated lines. Weakest area: testing.
| Area | Score |
|---|---|
| Complexity (lizard) | 60 |
| Duplication | 33 |
| Code smells (Opengrep) | 49 |
| Tests and CI | 15 |
| Documentation | 65 |
| Type safety | n/a |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 301; mean complexity 2.7, 90th percentile 5; 4 complex and 3 long functions
- Duplicated lines: 18.4% of 2,987 compared
- Tests: 0 test lines for 4,152 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
- Docs missing or thin: contributing, changelog
Most complex functions:
- getEntryPreview in src/components/SearchBar.jsx: complexity 67, 105 lines
- renderEntryContent in src/components/EntryList.jsx: complexity 38, 100 lines
- EntryForm in src/components/EntryForm.jsx: complexity 25, 80 lines
- handleSubmit in src/components/EntryForm.jsx: complexity 24, 115 lines
- renderTypeSpecificFields in src/components/EntryForm.jsx: complexity 10, 154 lines
Security
Security posture is poor: 229 known vulnerabilities in 42 dependencies; 1 high-severity SAST findings; 12 high-severity workflow issues. Weakest area: posture.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 100 |
| Static analysis (Opengrep) | 52 |
| Vulnerable dependencies (OSV) | 1 |
| CI workflows (zizmor) | 10 |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
-
Known vulnerabilities: 229 in 42 packages (critical 3, high 110, medium 98, low 18)
-
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| critical | osv/GHSA-jqcg-44mw-7w3h: [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h |
package-lock.json |
| critical | osv/GHSA-w7jw-789q-3m8p: [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p |
package-lock.json |
| critical | osv/GHSA-23hp-3jrh-7fpw: [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw |
package-lock.json |
| high | opengrep/dockerfile.security.missing-user: By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium] |
Dockerfile:62 |
| high | osv/GHSA-27p8-2357-5qqv: @xmldom/[email protected] (npm) is affected by GHSA-27p8-2357-5qqv |
package-lock.json |
| high | osv/GHSA-2v35-w6hq-6mfw: @xmldom/[email protected] (npm) is affected by GHSA-2v35-w6hq-6mfw |
package-lock.json |
| high | osv/GHSA-4w3w-2rp5-g8jm: @xmldom/[email protected] (npm) is affected by GHSA-4w3w-2rp5-g8jm |
package-lock.json |
| high | osv/GHSA-8344-3jmq-59r6: @xmldom/[email protected] (npm) is affected by GHSA-8344-3jmq-59r6 |
package-lock.json |
| high | osv/GHSA-93r5-fhx6-vmg9: @xmldom/[email protected] (npm) is affected by GHSA-93r5-fhx6-vmg9 |
package-lock.json |
| high | osv/GHSA-965w-775f-mr7g: @xmldom/[email protected] (npm) is affected by GHSA-965w-775f-mr7g |
package-lock.json |
| high | osv/GHSA-c7q8-3ch8-vqpv: @xmldom/[email protected] (npm) is affected by GHSA-c7q8-3ch8-vqpv |
package-lock.json |
| high | osv/GHSA-f6ww-3ggp-fr8h: @xmldom/[email protected] (npm) is affected by GHSA-f6ww-3ggp-fr8h |
package-lock.json |
| high | osv/GHSA-j759-j44w-7fr8: @xmldom/[email protected] (npm) is affected by GHSA-j759-j44w-7fr8 |
package-lock.json |
| high | osv/GHSA-w2rr-34g9-rvrj: @xmldom/[email protected] (npm) is affected by GHSA-w2rr-34g9-rvrj |
package-lock.json |
| high | osv/GHSA-wh4c-j3r5-mjhp: @xmldom/[email protected] (npm) is affected by GHSA-wh4c-j3r5-mjhp |
package-lock.json |
| high | osv/GHSA-x4fp-j954-r2f4: @xmldom/[email protected] (npm) is affected by GHSA-x4fp-j954-r2f4 |
package-lock.json |
| high | osv/GHSA-x6wf-f3px-wcqx: @xmldom/[email protected] (npm) is affected by GHSA-x6wf-f3px-wcqx |
package-lock.json |
| high | osv/GHSA-7g7r-gx96-252g: [email protected] (npm) is affected by GHSA-7g7r-gx96-252g |
package-lock.json |
| high | osv/GHSA-35jp-ww65-95wh: [email protected] (npm) is affected by GHSA-35jp-ww65-95wh |
package-lock.json |
| high | osv/GHSA-3g43-6gmg-66jw: [email protected] (npm) is affected by GHSA-3g43-6gmg-66jw |
package-lock.json |
| high | osv/GHSA-3pq3-5fj3-cg6v: [email protected] (npm) is affected by GHSA-3pq3-5fj3-cg6v |
package-lock.json |
| high | osv/GHSA-43fc-jf86-j433: [email protected] (npm) is affected by GHSA-43fc-jf86-j433 |
package-lock.json |
| high | osv/GHSA-542g-h47m-68v8: [email protected] (npm) is affected by GHSA-542g-h47m-68v8 |
package-lock.json |
| high | osv/GHSA-62hf-57xw-28j9: [email protected] (npm) is affected by GHSA-62hf-57xw-28j9 |
package-lock.json |
| high | osv/GHSA-6chq-wfr3-2hj9: [email protected] (npm) is affected by GHSA-6chq-wfr3-2hj9 |
package-lock.json |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Distribution signals
- binary-release-asset: release 1.3.0 ships Dialedger-1.3.0-arm64.dmg (5 downloads)
- binary-release-asset: release 1.3.0 ships Dialedger-1.3.0.AppImage (5 downloads)
- binary-release-asset: release 1.3.0 ships Dialedger.1.3.0.exe (4 downloads)
- binary-release-asset: release 1.3.0 ships Dialedger.Setup.1.3.0.exe (3 downloads)
- binary-release-asset: release 1.2.0 ships Dialedger-1.2.0-arm64.dmg (2 downloads)
Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.
Repository profile
- Source lines: 4,152; test lines: 0
| Language | Lines |
|---|---|
| JavaScript | 4,152 |