Leaderboard github.com

srinidevar/cs_research_papers

Collection of Computer Science Research Papers

View repository ↗
Python
★ 1
commit 5db631bf3a58
scored 2026-11-14
scoring prov-5+qual-2+sec-2

AI provenance

none-detected

Confidence: 65%
Coverage: 100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

54/100

weak

Confidence: 90%
Coverage: 100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

64/100

weak

Confidence: 85%
Coverage: 100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

Explicitly attributed share0%
Unattributed share in AI-pace bursts0%
Estimated AI-generated share0%
AI tool configuration files0
Work sessions at AI pace0
Releases at AI pacenot measured
Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

2025-05126 · 0% AI
2025-060 · 0% AI
2025-070 · 0% AI
2025-080 · 0% AI
2025-090 · 0% AI
2025-100 · 0% AI
2025-110 · 0% AI
2025-120 · 0% AI
2026-010 · 0% AI
2026-020 · 0% AI
2026-030 · 0% AI
2026-060 · 0% AI
2026-070 · 0% AI
2026-080 · 0% AI
2026-090 · 0% AI

Evidence by analyzer

Explicit AI attributionok

attributed_commit_share: 0.0%
attributed_commits: 0
attributed_loc: 0
attributed_loc_share: 0.0%
commits: 206
effective_loc: 126
tools_detected: 0

AI tool configurationok

artifacts: 0
tools_configured: 0
workflow_agents: 0

Commit velocityok

excluded_import_loc: 0
flagged_loc: 0
flagged_loc_share: 0.0%
flagged_units: 0
max_loc_per_hour: 31.40
measured_loc: 126
median_loc_per_hour: 31.40
pr_timed_units: 0
pre_ai_era_burst_loc: 0
pre_ai_era_bursts: 0
pre_ai_era_measured_loc: 0
work_units: 1

Release velocityskipped

Coding styleok

count:assistant_voice: 0
count:emoji_in_code: 0
count:narrated_steps: 0
count:placeholder: 0
files:assistant_voice: 0
files:emoji_in_code: 0
files:narrated_steps: 0
files:placeholder: 0
index: 0
lines_scanned: 126
per_kloc:assistant_voice: 0
per_kloc:emoji_in_code: 0
per_kloc:narrated_steps: 0
per_kloc:placeholder: 0

Code quality

54 weak

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

How the score is built

Complexity100
Duplication100
Lint and smells37
Tests and CI0
Documentation65
Type safety40
Review processnot measured

Evidence by analyzer

Complexity (lizard)ok

complex_functions: 0
function_nloc: 37
functions: 3
long_functions: 0
many_param_functions: 0
mean_ccn: 2.67
p90_ccn: 5
risky_nloc_share: 0.0%

Duplication (jscpd)ok

compared_lines: 108
duplicated_lines: 0
duplicated_share: 0.0%
files: 2

Lintok

category:best-practice: 2
findings: 2
scanned_lines: 126
weighted_findings: 4

Tests and CIok

check:ci_present: no
check:ci_runs_lint: no
check:ci_runs_tests: no
check:has_tests: no
check:test_ratio: no
check:tests_cochange: no
ci_files: 0
cochange_commits: 2
cochange_share: 0.0%
source_lines: 126
test_lines: 0
test_ratio: 0

Documentationok2 items

README.md README.md
LICENSE LICENSE

check:changelog: no
check:contributing: no
check:license: yes
check:readme: yes
readme_lines: 687

Type safetyok

check:low_escape_density: yes
check:strict_config: no
escapes: 0
escapes_per_kloc: 0

Security

64 weak

Security posture is weak: 87 known vulnerabilities in 8 dependencies. Weakest area: posture.

How the score is built

Secrets100
Static analysis (SAST)84
Vulnerable dependencies31
CI workflowsnot measured
Security posture0
OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok

checked: 25
declared: 25
lookup_errors: 0
missing: 0
recent: 0

Secrets (gitleaks)ok

secrets_current: 0
secrets_history: 0
secrets_low_confidence: 0
secrets_nonprod: 0

Static analysis (opengrep)ok

findings: 2
findings_high: 0
findings_low: 0
findings_medium: 2
parse_errors: 0
scanned_lines: 126
weighted_findings: 0.50

Dependencies (osv-scanner)ok

penalty: 70
vulnerabilities: 87
vulnerable_packages: 8
vulns_critical: 3
vulns_high: 39
vulns_low: 7
vulns_medium: 37
vulns_unknown: 1

CI workflows (zizmor)skipped

Security postureok

check:dependency_updates: no
check:lockfiles: yes
check:security_policy: no
check:signed_commits: no
signed_commit_share: 2.5%
unpinned_manifests: 0

Release downloadsok

binary_assets: 0
signals: 0
suspicious: 0

Findings

3 critical40 high41 medium7 low

Severity	Rule	Location	Message	Tool
critical	`osv/GHSA-63hf-3vf5-4wqf`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf	Dependencies (osv-scanner)
critical	`osv/GHSA-6q48-6c7w-9gw2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4320, GHSA-6q48-6c7w-9gw2	Dependencies (osv-scanner)
critical	`osv/GHSA-ffc3-869f-jxw9`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4145, GHSA-ffc3-869f-jxw9	Dependencies (osv-scanner)
high	`opengrep/python.lang.best-practice.arbitrary-sleep`	src/poll_arxiv.py:117	time.sleep() call; did you mean to leave this in?	Lint
high	`osv/GHSA-2fqr-mr3j-6wp8`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2112, GHSA-2fqr-mr3j-6wp8	Dependencies (osv-scanner)
high	`osv/GHSA-2g87-pp6c-29x5`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-2g87-pp6c-29x5	Dependencies (osv-scanner)
high	`osv/GHSA-2xpw-w6gg-jr37`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1994, GHSA-2xpw-w6gg-jr37	Dependencies (osv-scanner)
high	`osv/GHSA-38jv-5279-wg99`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1996, GHSA-38jv-5279-wg99	Dependencies (osv-scanner)
high	`osv/GHSA-4fvr-rgm6-gqmc`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc	Dependencies (osv-scanner)
high	`osv/GHSA-4m7w-qmgq-4wj5`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-237, GHSA-4m7w-qmgq-4wj5	Dependencies (osv-scanner)
high	`osv/GHSA-537c-gmf6-5ccf`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-537c-gmf6-5ccf	Dependencies (osv-scanner)
high	`osv/GHSA-5h86-8mv2-jq9f`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2024-24, GHSA-5h86-8mv2-jq9f	Dependencies (osv-scanner)
high	`osv/GHSA-5m98-qgg9-wh84`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1098, GHSA-5m98-qgg9-wh84	Dependencies (osv-scanner)
high	`osv/GHSA-5wr8-gcqf-gqf3`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-5wr8-gcqf-gqf3	Dependencies (osv-scanner)
high	`osv/GHSA-63hw-fmq6-xxg2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2	Dependencies (osv-scanner)
high	`osv/GHSA-6mq8-rvhq-8wgg`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg	Dependencies (osv-scanner)
high	`osv/GHSA-752w-5fwx-jx9f`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-120, GHSA-752w-5fwx-jx9f	Dependencies (osv-scanner)
high	`osv/GHSA-8988-9cw3-xx77`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4175, GHSA-8988-9cw3-xx77	Dependencies (osv-scanner)
high	`osv/GHSA-9v7f-9g4p-ffgj`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4144, GHSA-9v7f-9g4p-ffgj	Dependencies (osv-scanner)
high	`osv/GHSA-9x8q-7h8h-wcw9`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2113, GHSA-9x8q-7h8h-wcw9	Dependencies (osv-scanner)
high	`osv/GHSA-9xw5-w5jj-pvcg`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-9xw5-w5jj-pvcg	Dependencies (osv-scanner)
high	`osv/GHSA-cq5v-8q36-5273`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3545, GHSA-cq5v-8q36-5273	Dependencies (osv-scanner)
high	`osv/GHSA-g3cq-j2xw-wf74`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74	Dependencies (osv-scanner)
high	`osv/GHSA-g6cj-pr64-35w5`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3552, GHSA-g6cj-pr64-35w5	Dependencies (osv-scanner)
high	`osv/GHSA-gfw2-4jvh-wgfg`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2023-246, GHSA-gfw2-4jvh-wgfg	Dependencies (osv-scanner)
high	`osv/GHSA-gm62-xv2j-4w53`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1998, GHSA-gm62-xv2j-4w53	Dependencies (osv-scanner)
high	`osv/GHSA-hcc4-c3v8-rx92`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92	Dependencies (osv-scanner)
high	`osv/GHSA-hg6j-4rv6-33pg`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg	Dependencies (osv-scanner)
high	`osv/GHSA-jg22-mg44-37j8`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8	Dependencies (osv-scanner)
high	`osv/GHSA-jwv3-5hgf-82ww`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3553, GHSA-jwv3-5hgf-82ww	Dependencies (osv-scanner)
high	`osv/GHSA-m5qp-6w8w-w647`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647	Dependencies (osv-scanner)
high	`osv/GHSA-m6qw-4cw2-hm4m`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m	Dependencies (osv-scanner)
high	`osv/GHSA-p4g4-x82p-q773`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4149, GHSA-p4g4-x82p-q773	Dependencies (osv-scanner)
high	`osv/GHSA-p998-jp59-783m`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m	Dependencies (osv-scanner)
high	`osv/GHSA-pxh4-856f-4h89`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-pxh4-856f-4h89	Dependencies (osv-scanner)
high	`osv/GHSA-q3qx-c6g2-7pw2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2023-250, GHSA-q3qx-c6g2-7pw2	Dependencies (osv-scanner)
high	`osv/GHSA-qccp-gfcp-xxvc`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-141, GHSA-qccp-gfcp-xxvc	Dependencies (osv-scanner)
high	`osv/GHSA-r6ph-v2qm-q3c2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2141, GHSA-r6ph-v2qm-q3c2	Dependencies (osv-scanner)
high	`osv/GHSA-vxq7-64xx-v4gw`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4177, GHSA-vxq7-64xx-v4gw	Dependencies (osv-scanner)
high	`osv/GHSA-x33g-cr3x-6449`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4183, GHSA-x33g-cr3x-6449	Dependencies (osv-scanner)
high	`osv/GHSA-xcgm-r5h9-7989`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989	Dependencies (osv-scanner)
high	`osv/GHSA-xgmm-8j9v-c9wx`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-179, GHSA-xgmm-8j9v-c9wx	Dependencies (osv-scanner)
high	`osv/PYSEC-2025-183`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2025-183	Dependencies (osv-scanner)
medium	`opengrep/python.lang.best-practice.unspecified-open-encoding`	src/poll_arxiv.py:114	Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding="utf-8").	Lint
medium	`opengrep/python.lang.security.deserialization.avoid-pickle`	src/poll_arxiv.py:100	Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar...	Static analysis (opengrep)
medium	`opengrep/python.lang.security.deserialization.avoid-pickle`	src/poll_arxiv.py:112	Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar...	Static analysis (opengrep)
medium	`osv/GHSA-2gx3-rcp4-g85q`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4140, GHSA-2gx3-rcp4-g85q	Dependencies (osv-scanner)
medium	`osv/GHSA-2vrm-gr82-f7m5`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2096, GHSA-2vrm-gr82-f7m5	Dependencies (osv-scanner)
medium	`osv/GHSA-3wq7-rqq7-wx6j`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2099, GHSA-3wq7-rqq7-wx6j	Dependencies (osv-scanner)
medium	`osv/GHSA-42vr-xj54-vc7v`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4141, GHSA-42vr-xj54-vc7v	Dependencies (osv-scanner)
medium	`osv/GHSA-45c4-8wx5-qw6w`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2023-120, GHSA-45c4-8wx5-qw6w	Dependencies (osv-scanner)
medium	`osv/GHSA-48p4-8xcf-vxj5`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1997, GHSA-48p4-8xcf-vxj5	Dependencies (osv-scanner)
medium	`osv/GHSA-494j-54xm-rwp3`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-494j-54xm-rwp3	Dependencies (osv-scanner)
medium	`osv/GHSA-65pc-fj4g-8rjx`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-215, GHSA-65pc-fj4g-8rjx	Dependencies (osv-scanner)
medium	`osv/GHSA-6cjc-53gc-5rqm`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-6cjc-53gc-5rqm	Dependencies (osv-scanner)
medium	`osv/GHSA-6jhg-hg63-jvvf`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1100, GHSA-6jhg-hg63-jvvf	Dependencies (osv-scanner)
medium	`osv/GHSA-7gpw-8wmc-pm8g`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1102, GHSA-7gpw-8wmc-pm8g	Dependencies (osv-scanner)
medium	`osv/GHSA-8495-4g3g-x7pr`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1103, GHSA-8495-4g3g-x7pr	Dependencies (osv-scanner)
medium	`osv/GHSA-8qpw-xqxj-h4r2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2024-26, GHSA-8qpw-xqxj-h4r2	Dependencies (osv-scanner)
medium	`osv/GHSA-966j-vmvw-g2g9`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2100, GHSA-966j-vmvw-g2g9	Dependencies (osv-scanner)
medium	`osv/GHSA-993g-76c3-p5m4`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-175, GHSA-993g-76c3-p5m4	Dependencies (osv-scanner)
medium	`osv/GHSA-9hjg-9r4m-mvj7`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1872, GHSA-9hjg-9r4m-mvj7	Dependencies (osv-scanner)
medium	`osv/GHSA-c427-h43c-vf67`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2103, GHSA-c427-h43c-vf67	Dependencies (osv-scanner)
medium	`osv/GHSA-f9xw-jh8m-3mwq`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-f9xw-jh8m-3mwq	Dependencies (osv-scanner)
medium	`osv/GHSA-g84x-mcqj-x9qq`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1106, GHSA-g84x-mcqj-x9qq	Dependencies (osv-scanner)
medium	`osv/GHSA-gc5v-m9x4-r6x2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2275, GHSA-gc5v-m9x4-r6x2	Dependencies (osv-scanner)
medium	`osv/GHSA-hpj7-wq8m-9hgp`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2109, GHSA-hpj7-wq8m-9hgp	Dependencies (osv-scanner)
medium	`osv/GHSA-hxm8-2xgr-2p9m`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4147, GHSA-hxm8-2xgr-2p9m	Dependencies (osv-scanner)
medium	`osv/GHSA-jj3x-wxrx-4x23`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1107, GHSA-jj3x-wxrx-4x23	Dependencies (osv-scanner)
medium	`osv/GHSA-jq35-7prp-9v3f`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-176, GHSA-jq35-7prp-9v3f	Dependencies (osv-scanner)
medium	`osv/GHSA-jwrc-g2q2-pq5p`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4148, GHSA-jwrc-g2q2-pq5p	Dependencies (osv-scanner)
medium	`osv/GHSA-m959-cc7f-wv43`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-35, GHSA-m959-cc7f-wv43	Dependencies (osv-scanner)
medium	`osv/GHSA-mfx4-hv73-q22v`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3546, GHSA-mfx4-hv73-q22v	Dependencies (osv-scanner)
medium	`osv/GHSA-mq44-7p77-q5h7`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3547, GHSA-mq44-7p77-q5h7	Dependencies (osv-scanner)
medium	`osv/GHSA-mrfv-m5wm-5w6w`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3002, GHSA-mrfv-m5wm-5w6w	Dependencies (osv-scanner)
medium	`osv/GHSA-mwh4-6h8g-pg8w`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2101, GHSA-mwh4-6h8g-pg8w	Dependencies (osv-scanner)
medium	`osv/GHSA-pjjw-qhg8-p2p9`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-pjjw-qhg8-p2p9	Dependencies (osv-scanner)
medium	`osv/GHSA-pq67-6m6q-mj2v`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1999, GHSA-pq67-6m6q-mj2v	Dependencies (osv-scanner)
medium	`osv/GHSA-pqxq-w44r-73xw`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-pqxq-w44r-73xw	Dependencies (osv-scanner)
medium	`osv/GHSA-qvrw-v9rv-5rjx`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2023-251, GHSA-qvrw-v9rv-5rjx	Dependencies (osv-scanner)
medium	`osv/GHSA-w2fm-2cpv-w7v5`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-2094, GHSA-w2fm-2cpv-w7v5	Dependencies (osv-scanner)
medium	`osv/GHSA-w6j9-cwv2-h6wq`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-4152, GHSA-w6j9-cwv2-h6wq	Dependencies (osv-scanner)
medium	`osv/GHSA-w7vc-732c-9m39`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-178, GHSA-w7vc-732c-9m39	Dependencies (osv-scanner)
medium	`osv/PYSEC-2026-3554`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-3554	Dependencies (osv-scanner)
low	`osv/GHSA-54jq-c3m8-4m76`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1097, GHSA-54jq-c3m8-4m76	Dependencies (osv-scanner)
low	`osv/GHSA-69f9-5gxw-wvc2`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1099, GHSA-69f9-5gxw-wvc2	Dependencies (osv-scanner)
low	`osv/GHSA-9548-qrrj-x5pj`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1104, GHSA-9548-qrrj-x5pj	Dependencies (osv-scanner)
low	`osv/GHSA-fh55-r93g-j68g`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1105, GHSA-fh55-r93g-j68g	Dependencies (osv-scanner)
low	`osv/GHSA-fhv5-28vv-h8m8`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-177, GHSA-fhv5-28vv-h8m8	Dependencies (osv-scanner)
low	`osv/GHSA-gx76-c99x-2c96`	src/requirements.txt	[email protected] (PyPI) is affected by GHSA-gx76-c99x-2c96	Dependencies (osv-scanner)
low	`osv/GHSA-mqqc-3gqh-h2x8`	src/requirements.txt	[email protected] (PyPI) is affected by PYSEC-2026-1109, GHSA-mqqc-3gqh-h2x8	Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

Analyzer	Pillar	Status	Version	Findings	Note
AI tool configuration	AI provenance	ok	`signatures-v1`	0
Explicit AI attribution	AI provenance	ok	`signatures-v1`	0
Release velocity	AI provenance	skipped	`—`	0
Coding style	AI provenance	ok	`—`	0
Commit velocity	AI provenance	ok	`prov-4`	0
Complexity (lizard)	Code quality	ok	`lizard 1.25.1`	0
Documentation	Code quality	ok	`—`	0
Duplication (jscpd)	Code quality	ok	`repotrust-dup-w6`	0
Lint	Code quality	ok	`opengrep 1.33.1; rules f1d2b562b414`	2
Tests and CI	Code quality	ok	`—`	0
Type safety	Code quality	ok	`—`	0
CI workflows (zizmor)	Security	skipped	`—`	0
Dependencies (osv-scanner)	Security	ok	`osv-scanner version: 2.7.1`	87
Release downloads	Security	ok	`—`	0
Security posture	Security	ok	`—`	0
Package registries	Security	ok	`—`	0
Static analysis (opengrep)	Security	ok	`opengrep 1.33.1; rules f1d2b562b414`	2
OpenSSF Scorecard	Security	skipped	`—`	0	no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)	Security	ok	`gitleaks 8.30.1`	0

Score history

Scores from different scoring versions aren't directly comparable.

Scored	Commit	Scoring	AI provenance	Quality	Security
2026-11-14	`5db631bf3a58`	`prov-5+qual-2+sec-2`	0%	54	64
2026-11-14	`5db631bf3a58`	`prov-4+qual-2+sec-2`	0%	54	64

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/srinidevar/cs_research_papers/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/srinidevar/cs_research_papers/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/srinidevar/cs_research_papers/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/srinidevar/cs_research_papers/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/srinidevar/cs_research_papers/security.svg)](https://repotrust.synapticcyber.com/r/github.com/srinidevar/cs_research_papers/)

Full text report

Repository: https://github.com/srinidevar/cs_research_papers
Commit: 5db631bf3a581af4d20ef309625e46d430e04752
Generated: 2026-11-14T14:52:07+00:00
Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	none-detected	65%	100%
Code quality	54	weak	90%	100%
Security	64	weak	85%	100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%

Month	Lines added	Attributed to AI
2025-05	126	0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	100
Duplication	100
Code smells (Opengrep)	37
Tests and CI	0
Documentation	65
Type safety	40
Process (Scorecard review/maintenance)	n/a

Functions: 3; mean complexity 2.7, 90th percentile 5; 0 complex and 0 long functions
Duplicated lines: 0.0% of 108 compared
Tests: 0 test lines for 126 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
Docs missing or thin: contributing, changelog

Security

Security posture is weak: 87 known vulnerabilities in 8 dependencies. Weakest area: posture.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	84
Vulnerable dependencies (OSV)	31
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	n/a

Known vulnerabilities: 87 in 8 packages (critical 3, high 39, medium 37, low 7)
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity	Finding	Location
critical	`osv/GHSA-ffc3-869f-jxw9`: [email protected] (PyPI) is affected by PYSEC-2026-4145, GHSA-ffc3-869f-jxw9	src/requirements.txt
critical	`osv/GHSA-63hf-3vf5-4wqf`: [email protected] (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf	src/requirements.txt
critical	`osv/GHSA-6q48-6c7w-9gw2`: [email protected] (PyPI) is affected by PYSEC-2026-4320, GHSA-6q48-6c7w-9gw2	src/requirements.txt
high	`osv/PYSEC-2025-183`: [email protected] (PyPI) is affected by PYSEC-2025-183	src/requirements.txt
high	`osv/GHSA-752w-5fwx-jx9f`: [email protected] (PyPI) is affected by PYSEC-2026-120, GHSA-752w-5fwx-jx9f	src/requirements.txt
high	`osv/GHSA-xgmm-8j9v-c9wx`: [email protected] (PyPI) is affected by PYSEC-2026-179, GHSA-xgmm-8j9v-c9wx	src/requirements.txt
high	`osv/GHSA-9v7f-9g4p-ffgj`: [email protected] (PyPI) is affected by PYSEC-2026-4144, GHSA-9v7f-9g4p-ffgj	src/requirements.txt
high	`osv/GHSA-p4g4-x82p-q773`: [email protected] (PyPI) is affected by PYSEC-2026-4149, GHSA-p4g4-x82p-q773	src/requirements.txt
high	`osv/GHSA-x33g-cr3x-6449`: [email protected] (PyPI) is affected by PYSEC-2026-4183, GHSA-x33g-cr3x-6449	src/requirements.txt
high	`osv/GHSA-pxh4-856f-4h89`: [email protected] (PyPI) is affected by GHSA-pxh4-856f-4h89	src/requirements.txt
high	`osv/GHSA-gfw2-4jvh-wgfg`: [email protected] (PyPI) is affected by PYSEC-2023-246, GHSA-gfw2-4jvh-wgfg	src/requirements.txt
high	`osv/GHSA-q3qx-c6g2-7pw2`: [email protected] (PyPI) is affected by PYSEC-2023-250, GHSA-q3qx-c6g2-7pw2	src/requirements.txt
high	`osv/GHSA-5h86-8mv2-jq9f`: [email protected] (PyPI) is affected by PYSEC-2024-24, GHSA-5h86-8mv2-jq9f	src/requirements.txt
high	`osv/GHSA-5m98-qgg9-wh84`: [email protected] (PyPI) is affected by PYSEC-2026-1098, GHSA-5m98-qgg9-wh84	src/requirements.txt
high	`osv/GHSA-6mq8-rvhq-8wgg`: [email protected] (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg	src/requirements.txt
high	`osv/GHSA-hcc4-c3v8-rx92`: [email protected] (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92	src/requirements.txt
high	`osv/GHSA-p998-jp59-783m`: [email protected] (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m	src/requirements.txt
high	`osv/GHSA-m5qp-6w8w-w647`: [email protected] (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647	src/requirements.txt
high	`osv/GHSA-jg22-mg44-37j8`: [email protected] (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8	src/requirements.txt
high	`osv/GHSA-hg6j-4rv6-33pg`: [email protected] (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg	src/requirements.txt
high	`osv/GHSA-m6qw-4cw2-hm4m`: [email protected] (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m	src/requirements.txt
high	`osv/GHSA-4fvr-rgm6-gqmc`: [email protected] (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc	src/requirements.txt
high	`osv/GHSA-xcgm-r5h9-7989`: [email protected] (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989	src/requirements.txt
high	`osv/GHSA-63hw-fmq6-xxg2`: [email protected] (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2	src/requirements.txt
high	`osv/GHSA-g3cq-j2xw-wf74`: [email protected] (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74	src/requirements.txt

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 126; test lines: 0

Language	Lines
Python	126