withoutboats/notty

A new kind of terminal

https://github.com/withoutboats/notty · commit 077b57357f3f · scored 2026-11-13 · scoring prov-4+qual-2+sec-2

Dispute this score or request a re-score Full report JSON

Repository: https://github.com/withoutboats/notty
Commit: 077b57357f3feff0a4b267d1faabaa0ddaf2b65e
Generated: 2026-11-13T23:30:10+00:00
Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

Pillar	Score	Signal	Confidence	Coverage
AI provenance (estimated AI-generated share)	0	none-detected	65%	100%
Code quality	47	poor	90%	100%
Security	73	adequate	85%	100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

Explicitly attributed share (lower bound): 0.0%
Unattributed share in AI-consistent velocity bursts: 0.0%
Estimated AI-generated share: 0.0%

Month	Lines added	Attributed to AI
2015-11	9,387	0%
2015-12	1,577	0%
2016-01	6	0%
2016-02	1,132	0%
2016-03	256	0%
2016-04	1,632	0%
2016-05	1,452	0%
2016-06	43	0%
2016-07	2,200	0%
2016-08	1	0%
2016-10	540	0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 19% of function code in complex or long functions; 12% duplicated lines. Weakest area: testing.

Area	Score
Complexity (lizard)	56
Duplication	49
Code smells (Opengrep)	99
Tests and CI	0
Documentation	65
Type safety	n/a
Process (Scorecard review/maintenance)	n/a

Functions: 602; mean complexity 2.6, 90th percentile 4; 14 complex and 2 long functions
Duplicated lines: 11.9% of 6,042 compared
Tests: 0 test lines for 8,883 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
Docs missing or thin: contributing, changelog

Most complex functions:

Security

Security posture is adequate: no high-impact findings. Weakest area: posture.

Area	Score
Secrets (gitleaks, tree + history)	100
Static analysis (Opengrep)	75
Vulnerable dependencies (OSV)	n/a
CI workflows (zizmor)	n/a
Posture (policy, updates, signing, lockfiles)	0
OpenSSF Scorecard	n/a

Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles

Top findings

Severity	Finding	Location
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:27
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:33
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:38
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:43
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:48
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:53
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:58
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:63
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr.rs:78
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr_list.rs:27
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr_list.rs:31
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr_list.rs:44
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/attr_list.rs:50
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/layout.rs:36
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/layout.rs:50
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/layout.rs:57
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/layout.rs:71
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/pangocairo/src/wrap/layout.rs:77
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/src/cfg.rs:28
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/src/image_renderer.rs:27
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	notty-cairo/src/image_renderer.rs:36
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	scaffolding/src/main.rs:124
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	scaffolding/src/main.rs:133
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	scaffolding/tty/src/lib.rs:56
low	`opengrep/rust.lang.security.unsafe-usage`: Detected 'unsafe' usage, please audit for secure usage [confidence high]	scaffolding/tty/src/lib.rs:64

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

Source lines: 8,883; test lines: 0

Language	Lines
Rust	8,869
Shell	9
Ruby	5

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/withoutboats/notty/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/withoutboats/notty/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/withoutboats/notty/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/withoutboats/notty/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/withoutboats/notty/security.svg)](https://repotrust.synapticcyber.com/r/github.com/withoutboats/notty/)