xavi129/escribetucancion-landing

• Repository: https://github.com/xavi129/escribetucancion-landing
• Commit: 86a15d9b7c3f5ee97e08fbf45bc7d7e51ba27bf6
• Generated: 2026-11-14T14:52:08+00:00
• Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development. Comments and strings use phrasing typical of LLM-written code (see the coding style evidence).

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 0.0%

• Estimated AI-generated share: 0.0%

• Stylometry index: 2.14 per 1,000 lines (narrated steps 1, placeholders 0, assistant phrasing 0, emoji 101). Reported as a signal, not scored.

Evidence

• step-by-step narration comment: // First, try to get the price directly from songTypePrice (app/crear-ca)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is poor: test-to-source ratio 0.01, no CI test run detected; 34% of function code in complex or long functions; 19% duplicated lines. Weakest area: lint.

• Functions: 899; mean complexity 2.8, 90th percentile 6; 22 complex and 16 long functions
• Duplicated lines: 18.7% of 18,193 compared
• Tests: 256 test lines for 24,095 source lines (ratio 0.01); CI test commands: none detected; 100% of recent source commits also change tests
• Docs missing or thin: license, contributing, changelog

Most complex functions:

• handleWhatsappClick in app/crear-cancion/confirmacion/page.tsx: complexity 47, 120 lines
• formatWhatsAppMessageFreemium in app/crear-cancion/utils.ts: complexity 46, 63 lines
• extractTwoLyrics in app/api/generate-lyrics/route.ts: complexity 40, 105 lines
• handleFinishEditing in app/crear-cancion/confirmacion/page.tsx: complexity 37, 90 lines
• handleNext in app/crear-cancion/page.tsx: complexity 33, 110 lines

Security

Security posture is weak: 104 known vulnerabilities in 30 dependencies; 4 high-severity workflow issues. Weakest area: posture.

• Known vulnerabilities: 104 in 30 packages (critical 3, high 56, medium 39, low 6)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 24,095; test lines: 256