tmoody1973/blk-exchange

• Repository: https://github.com/tmoody1973/blk-exchange
• Commit: e0e2dad2498e6cf39d94ef41e0b4eeeae9a456c4
• Generated: 2026-11-14T14:52:08+00:00
• Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 51.2%

• Estimated AI-generated share: 0.0%

• AI tooling configured in repo: claude-code

• Stylometry index: 0.54 per 1,000 lines (narrated steps 3, placeholders 0, assistant phrasing 1, emoji 14). Reported as a signal, not scored.

Evidence

• 5,891 lines of first-party code in ~2.1h (2,818 lines/hour, 8 commit session) (47ad98eb07e3)
• docs/CLAUDE.md (claude-code configuration) (docs/CLAUDE.)
• docs/plans/CLAUDE.md (claude-code configuration) (docs/plans/C)
• 5,180 lines of first-party code in ~5.3h (982 lines/hour, 7 commit session) (59eb56aabb77)
• 1,431 lines of first-party code in ~1.6h (919 lines/hour, 1 commit session) (091b704e70ee)
• assistant-style phrasing left in code: 7. After the narrative, provide the structured sections exactly as requested.`, (convex/claud)
• step-by-step narration comment: // Step 1: Delete ALL leaderboard entries (clean slate) (convex/leade)
• step-by-step narration comment: // Step 2: Recalculate and insert fresh entries for all players (convex/leade)
• step-by-step narration comment: // Step 2: animate price (docs/referen)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 28% of function code in complex or long functions; 8% duplicated lines. Weakest area: testing.

• Functions: 902; mean complexity 2.5, 90th percentile 6; 12 complex and 19 long functions
• Duplicated lines: 8.3% of 16,334 compared
• Tests: 0 test lines for 22,039 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
• Docs missing or thin: license, contributing, changelog

Most complex functions:

• handler in convex/vault.ts: complexity 54, 171 lines
• handler in convex/achievements.ts: complexity 27, 124 lines
• (anonymous) in convex/news/firecrawl.ts: complexity 24, 14 lines
• handler in convex/articles.ts: complexity 20, 31 lines
• TickerDetailPage in src/app/(app)/market/[symbol]/page.tsx: complexity 20, 198 lines

Security

Security posture is weak: 200 known vulnerabilities in 40 dependencies. Weakest area: posture.

• Known vulnerabilities: 200 in 40 packages (critical 6, high 77, medium 107, low 10)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 22,039; test lines: 0