RepoTrust

Leaderboard github.com

xi-frontend/xi-term

A terminal frontend for Xi

  • View repository ↗
  • Rust
  • ★ 487
  • commit d264767e3dbb
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

66/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

61/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

AI provenance

0% none-detected

No AI attribution or AI-consistent velocity signals detected.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts0%
  • Estimated AI-generated share0%
  • AI tool configuration files0
  • Work sessions at AI pace0
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.00

Lines added per month all AI-attributed share

  1. 2016-09692 · 0% AI
  2. 2016-112 · 0% AI
  3. 2017-041,591 · 0% AI
  4. 2017-05887 · 0% AI
  5. 2017-091,149 · 0% AI
  6. 2017-10422 · 0% AI
  7. 2018-0256 · 0% AI
  8. 2018-0355 · 0% AI
  9. 2018-0420 · 0% AI
  10. 2018-0532 · 0% AI
  11. 2018-07520 · 0% AI
  12. 2018-10314 · 0% AI
  13. 2018-1259 · 0% AI
  14. 2019-0131 · 0% AI
  15. 2019-0256 · 0% AI
  16. 2019-0368 · 0% AI
  17. 2019-06516 · 0% AI
  18. 2019-070 · 0% AI
  19. 2019-091 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
191
effective_loc
6,471
tools_detected
0
AI tool configurationok
artifacts
0
tools_configured
0
workflow_agents
0
Commit velocityok
excluded_import_loc
0
flagged_loc
0
flagged_loc_share
0.0%
flagged_units
0
max_loc_per_hour
241.25
measured_loc
6,471
median_loc_per_hour
58.91
pr_timed_units
15
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
6,471
work_units
88
Release velocityskipped
Coding styleok
count:assistant_voice
0
count:emoji_in_code
0
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
0
files:narrated_steps
0
files:placeholder
0
index
0
lines_scanned
1,867
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

66 adequate

Code quality is adequate: test-to-source ratio 0.00, no CI test run detected; 9% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity77
  • Duplication100
  • Lint and smells100
  • Tests and CI25
  • Documentation45
  • Type safetynot measured
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok3 items
complex_functions
3
function_nloc
1,261
functions
116
long_functions
0
many_param_functions
0
mean_ccn
2.78
p90_ccn
6
risky_nloc_share
8.7%
Duplication (jscpd)ok
compared_lines
1,237
duplicated_lines
0
duplicated_share
0.0%
files
14
Lintok
findings
0
scanned_lines
1,867
weighted_findings
0
Tests and CIok2 items
  • CI config: .travis.yml .travis.yml
  • CI runs linters (clippy)
check:ci_present
yes
check:ci_runs_lint
yes
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
1
cochange_commits
144
cochange_share
0.0%
source_lines
1,867
test_lines
0
test_ratio
0
Documentationok2 items
  • .github/README.png .github/README.png
  • LICENSE LICENSE
check:changelog
no
check:contributing
no
check:license
yes
check:readme
no
readme_lines
0
Type safetyskipped

Security

61 weak

Security posture is weak: 44 known vulnerabilities in 39 dependencies. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)100
  • Vulnerable dependencies3
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
10
declared
10
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
0
findings_high
0
findings_low
0
findings_medium
0
parse_errors
0
scanned_lines
1,867
weighted_findings
0
Dependencies (osv-scanner)ok
penalty
204
vulnerabilities
44
vulnerable_packages
39
vulns_critical
6
vulns_high
4
vulns_low
0
vulns_medium
7
vulns_unknown
27
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
3.7%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

6 critical4 high34 medium

SeverityRuleLocationMessageTool
critical osv/GHSA-43w2-9j62-hq99 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0003, GHSA-43w2-9j62-hq99 Dependencies (osv-scanner)
critical osv/GHSA-j79j-cx3h-g27h Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0027, GHSA-j79j-cx3h-g27h Dependencies (osv-scanner)
critical osv/GHSA-jq66-xh47-j9f3 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2019-0036, RUSTSEC-2020-0036, GHSA-jq66-xh47-j9f3, GHSA-r98r-j25q-rmpr Dependencies (osv-scanner)
critical osv/GHSA-mmc9-pwm7-qj5w Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2019-0035, GHSA-mmc9-pwm7-qj5w Dependencies (osv-scanner)
critical osv/GHSA-pqqp-xmhj-wgcw Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0093, GHSA-pqqp-xmhj-wgcw Dependencies (osv-scanner)
critical osv/GHSA-r43h-gmrm-h5c9 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0026, GHSA-r43h-gmrm-h5c9 Dependencies (osv-scanner)
high osv/GHSA-55m5-whcv-c49c Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2018-0018, GHSA-55m5-whcv-c49c, GHSA-66p5-j55p-32r9 Dependencies (osv-scanner)
high osv/GHSA-fg7r-2g4j-5cgr Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0124, GHSA-fg7r-2g4j-5cgr Dependencies (osv-scanner)
high osv/GHSA-qc84-gqf4-9926 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2022-0041, GHSA-qc84-gqf4-9926 Dependencies (osv-scanner)
high osv/GHSA-rh89-x75f-rh3c Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2019-0011, GHSA-rh89-x75f-rh3c Dependencies (osv-scanner)
medium osv/GHSA-458v-4hrf-g3m4 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0078, GHSA-458v-4hrf-g3m4, GHSA-c79c-gwph-gqfm Dependencies (osv-scanner)
medium osv/GHSA-458v-4hrf-g3m4 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0079, GHSA-458v-4hrf-g3m4 Dependencies (osv-scanner)
medium osv/GHSA-566x-hhrf-qf8m Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0082, GHSA-566x-hhrf-qf8m Dependencies (osv-scanner)
medium osv/GHSA-5wg8-7c9q-794v Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0070, GHSA-5wg8-7c9q-794v, GHSA-gmv4-vmx3-x9f3, GHSA-hj9h-wrgg-hgmx Dependencies (osv-scanner)
medium osv/GHSA-6888-wf7j-34jq Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2022-0021, GHSA-6888-wf7j-34jq Dependencies (osv-scanner)
medium osv/GHSA-9qxh-258v-666c Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2022-0040, GHSA-9qxh-258v-666c Dependencies (osv-scanner)
medium osv/GHSA-g98v-hv3f-hcfr Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0145, GHSA-g98v-hv3f-hcfr Dependencies (osv-scanner)
medium osv/GHSA-jrcf-4jp8-m28v Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0080, GHSA-jrcf-4jp8-m28v Dependencies (osv-scanner)
medium osv/GHSA-pp8r-vv2j-9j5v Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0144, GHSA-pp8r-vv2j-9j5v Dependencies (osv-scanner)
medium osv/GHSA-vfv3-9w6v-23jp Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2019-0039, GHSA-vfv3-9w6v-23jp Dependencies (osv-scanner)
medium osv/GHSA-wcg3-cvx6-7396 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0071, GHSA-wcg3-cvx6-7396 Dependencies (osv-scanner)
medium osv/GHSA-wfg4-322g-9vqv Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2023-0045, GHSA-wfg4-322g-9vqv Dependencies (osv-scanner)
medium osv/RUSTSEC-2020-0016 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0016 Dependencies (osv-scanner)
medium osv/RUSTSEC-2020-0080 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0080 Dependencies (osv-scanner)
medium osv/RUSTSEC-2020-0159 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2020-0159 Dependencies (osv-scanner)
medium osv/RUSTSEC-2021-0139 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2021-0139 Dependencies (osv-scanner)
medium osv/RUSTSEC-2023-0081 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2023-0081 Dependencies (osv-scanner)
medium osv/RUSTSEC-2024-0320 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2024-0320 Dependencies (osv-scanner)
medium osv/RUSTSEC-2024-0375 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2024-0375 Dependencies (osv-scanner)
medium osv/RUSTSEC-2025-0124 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2025-0124 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0050 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0050 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0051 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0051 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0052 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0052 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0054 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0054 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0055 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0055 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0056 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0056 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0057 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0057 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0058 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0058 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0059 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0059 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0060 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0060 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0061 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0061 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0063 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0063 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0064 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0064 Dependencies (osv-scanner)
medium osv/RUSTSEC-2026-0065 Cargo.lock [email protected] (crates.io) is affected by RUSTSEC-2026-0065 Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b4140
Tests and CICode qualityok—0
Type safetyCode qualityskipped—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.144
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b4140
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-14d264767e3dbbprov-5+qual-2+sec-20%6661
2026-11-14d264767e3dbbprov-4+qual-2+sec-20%6661

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/xi-frontend/xi-term/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/xi-frontend/xi-term/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/xi-frontend/xi-term/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/xi-frontend/xi-term/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/xi-frontend/xi-term/security.svg)](https://repotrust.synapticcyber.com/r/github.com/xi-frontend/xi-term/)
Full text report
  • Repository: https://github.com/xi-frontend/xi-term
  • Commit: d264767e3dbb5716d0004182e1a59a626200e736
  • Generated: 2026-11-14T14:52:08+00:00
  • Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 66 adequate 90% 100%
Security 61 weak 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 0.0%
Month Lines added Attributed to AI
2018-02 56 0%
2018-03 55 0%
2018-04 20 0%
2018-05 32 0%
2018-07 520 0%
2018-10 314 0%
2018-12 59 0%
2019-01 31 0%
2019-02 56 0%
2019-03 68 0%
2019-06 516 0%
2019-09 1 0%

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.00, no CI test run detected; 9% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 77
Duplication 100
Code smells (Opengrep) 100
Tests and CI 25
Documentation 45
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 116; mean complexity 2.8, 90th percentile 6; 3 complex and 0 long functions
  • Duplicated lines: 0.0% of 1,237 compared
  • Tests: 0 test lines for 1,867 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: readme, contributing, changelog

Most complex functions:

Security

Security posture is weak: 44 known vulnerabilities in 39 dependencies. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 100
Vulnerable dependencies (OSV) 3
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a
  • Known vulnerabilities: 44 in 39 packages (critical 6, high 4, medium 7, low 0)

  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
critical osv/GHSA-pqqp-xmhj-wgcw: [email protected] (crates.io) is affected by RUSTSEC-2021-0093, GHSA-pqqp-xmhj-wgcw Cargo.lock
critical osv/GHSA-jq66-xh47-j9f3: [email protected] (crates.io) is affected by RUSTSEC-2019-0036, RUSTSEC-2020-0036, GHSA-jq66-xh47-j9f3, GHSA-r98r-j25q-rmpr Cargo.lock
critical osv/GHSA-r43h-gmrm-h5c9: [email protected] (crates.io) is affected by RUSTSEC-2020-0026, GHSA-r43h-gmrm-h5c9 Cargo.lock
critical osv/GHSA-mmc9-pwm7-qj5w: [email protected] (crates.io) is affected by RUSTSEC-2019-0035, GHSA-mmc9-pwm7-qj5w Cargo.lock
critical osv/GHSA-43w2-9j62-hq99: [email protected] (crates.io) is affected by RUSTSEC-2021-0003, GHSA-43w2-9j62-hq99 Cargo.lock
critical osv/GHSA-j79j-cx3h-g27h: [email protected] (crates.io) is affected by RUSTSEC-2020-0027, GHSA-j79j-cx3h-g27h Cargo.lock
high osv/GHSA-qc84-gqf4-9926: [email protected] (crates.io) is affected by RUSTSEC-2022-0041, GHSA-qc84-gqf4-9926 Cargo.lock
high osv/GHSA-rh89-x75f-rh3c: [email protected] (crates.io) is affected by RUSTSEC-2019-0011, GHSA-rh89-x75f-rh3c Cargo.lock
high osv/GHSA-55m5-whcv-c49c: [email protected] (crates.io) is affected by RUSTSEC-2018-0018, GHSA-55m5-whcv-c49c, GHSA-66p5-j55p-32r9 Cargo.lock
high osv/GHSA-fg7r-2g4j-5cgr: [email protected] (crates.io) is affected by RUSTSEC-2021-0124, GHSA-fg7r-2g4j-5cgr Cargo.lock
medium osv/RUSTSEC-2021-0139: [email protected] (crates.io) is affected by RUSTSEC-2021-0139 Cargo.lock
medium osv/GHSA-g98v-hv3f-hcfr: [email protected] (crates.io) is affected by RUSTSEC-2021-0145, GHSA-g98v-hv3f-hcfr Cargo.lock
medium osv/RUSTSEC-2024-0375: [email protected] (crates.io) is affected by RUSTSEC-2024-0375 Cargo.lock
medium osv/RUSTSEC-2020-0159: [email protected] (crates.io) is affected by RUSTSEC-2020-0159 Cargo.lock
medium osv/GHSA-6888-wf7j-34jq: [email protected] (crates.io) is affected by RUSTSEC-2022-0021, GHSA-6888-wf7j-34jq Cargo.lock
medium osv/GHSA-5wg8-7c9q-794v: [email protected] (crates.io) is affected by RUSTSEC-2020-0070, GHSA-5wg8-7c9q-794v, GHSA-gmv4-vmx3-x9f3, GHSA-hj9h-wrgg-hgmx Cargo.lock
medium osv/GHSA-wfg4-322g-9vqv: [email protected] (crates.io) is affected by RUSTSEC-2023-0045, GHSA-wfg4-322g-9vqv Cargo.lock
medium osv/RUSTSEC-2020-0080: [email protected] (crates.io) is affected by RUSTSEC-2020-0080 Cargo.lock
medium osv/GHSA-jrcf-4jp8-m28v: [email protected] (crates.io) is affected by RUSTSEC-2020-0080, GHSA-jrcf-4jp8-m28v Cargo.lock
medium osv/RUSTSEC-2020-0016: [email protected] (crates.io) is affected by RUSTSEC-2020-0016 Cargo.lock
medium osv/GHSA-458v-4hrf-g3m4: [email protected] (crates.io) is affected by RUSTSEC-2020-0078, GHSA-458v-4hrf-g3m4, GHSA-c79c-gwph-gqfm Cargo.lock
medium osv/GHSA-566x-hhrf-qf8m: [email protected] (crates.io) is affected by RUSTSEC-2020-0082, GHSA-566x-hhrf-qf8m Cargo.lock
medium osv/GHSA-9qxh-258v-666c: [email protected] (crates.io) is affected by RUSTSEC-2022-0040, GHSA-9qxh-258v-666c Cargo.lock
medium osv/RUSTSEC-2025-0124: [email protected] (crates.io) is affected by RUSTSEC-2025-0124 Cargo.lock
medium osv/RUSTSEC-2023-0081: [email protected] (crates.io) is affected by RUSTSEC-2023-0081 Cargo.lock

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 1,867; test lines: 0
Language Lines
Rust 1,867