RepoTrust

Leaderboard github.com

yasirali0/drift

  • View repository ↗
  • TypeScript
  • ★ 0
  • commit 44584a545e3c
  • scored 2026-11-14
  • scoring prov-5+qual-2+sec-2

AI provenance

0%

possible

Confidence
44%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

51/100

weak

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

62/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Dispute or request a re-score Full report JSON RepoTrust ai badgeRepoTrust quality badgeRepoTrust security badge

AI provenance

0% possible

Weak signals consistent with AI-assisted development.

How the score is built

  • Explicitly attributed share0%
  • Unattributed share in AI-pace bursts66%
  • Estimated AI-generated share0%
  • AI tool configuration files1
  • Work sessions at AI pace2
  • Releases at AI pacenot measured
  • Coding-style index (1.0+ means possible)0.19

Lines added per month all AI-attributed share

  1. 2026-035,479 · 0% AI

Evidence by analyzer

Explicit AI attributionok
attributed_commit_share
0.0%
attributed_commits
0
attributed_loc
0
attributed_loc_share
0.0%
commits
16
effective_loc
5,479
tools_detected
0
AI tool configurationok1 item
artifacts
1
earliest_adoption
2026-03-05
tools_configured
1
workflow_agents
0
Commit velocityok2 items
excluded_import_loc
0
flagged_loc
3,623
flagged_loc_share
66.1%
flagged_units
2
max_loc_per_hour
765.82
measured_loc
5,479
median_loc_per_hour
483.91
pr_timed_units
0
pre_ai_era_burst_loc
0
pre_ai_era_bursts
0
pre_ai_era_measured_loc
0
work_units
4
Release velocityskipped
Coding styleok
count:assistant_voice
0
count:emoji_in_code
2
count:narrated_steps
0
count:placeholder
0
files:assistant_voice
0
files:emoji_in_code
1
files:narrated_steps
0
files:placeholder
0
index
0.19
lines_scanned
5,337
per_kloc:assistant_voice
0
per_kloc:emoji_in_code
0.38
per_kloc:narrated_steps
0
per_kloc:placeholder
0

Code quality

51 weak

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 18% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing.

How the score is built

  • Complexity58
  • Duplication90
  • Lint and smells79
  • Tests and CI0
  • Documentation40
  • Type safety100
  • Review processnot measured

Evidence by analyzer

Complexity (lizard)ok9 items
complex_functions
8
function_nloc
3,765
functions
241
long_functions
2
many_param_functions
1
mean_ccn
3.43
p90_ccn
8
risky_nloc_share
18.0%
Duplication (jscpd)ok4 items
compared_lines
3,863
duplicated_lines
70
duplicated_share
1.8%
files
33
Lintok
category:best-practice
1
category:correctness
16
findings
17
scanned_lines
5,337
weighted_findings
5
Tests and CIok
check:ci_present
no
check:ci_runs_lint
no
check:ci_runs_tests
no
check:has_tests
no
check:test_ratio
no
check:tests_cochange
no
ci_files
0
cochange_commits
12
cochange_share
0.0%
source_lines
5,337
test_lines
0
test_ratio
0
Documentationok1 item
  • README.md README.md
check:changelog
no
check:contributing
no
check:license
no
check:readme
yes
readme_lines
79
Type safetyok1 item
  • TypeScript strict type checking: tsconfig.json tsconfig.json
check:low_escape_density
yes
check:strict_config
yes
escapes
0
escapes_per_kloc
0

Security

62 weak

Security posture is weak: 20 known vulnerabilities in 6 dependencies; 8 high-severity SAST findings. Weakest area: posture.

How the score is built

  • Secrets100
  • Static analysis (SAST)62
  • Vulnerable dependencies45
  • CI workflowsnot measured
  • Security posture0
  • OpenSSF Scorecardnot measured

Evidence by analyzer

OpenSSF Scorecardskipped

no published OpenSSF Scorecard result for this repo

Package registriesok
checked
4
declared
4
lookup_errors
0
missing
0
recent
0
Secrets (gitleaks)ok
secrets_current
0
secrets_history
0
secrets_low_confidence
0
secrets_nonprod
0
Static analysis (opengrep)ok
findings
13
findings_high
8
findings_low
0
findings_medium
5
parse_errors
0
scanned_lines
5,337
weighted_findings
7.25
Dependencies (osv-scanner)ok
penalty
48
vulnerabilities
20
vulnerable_packages
6
vulns_critical
0
vulns_high
10
vulns_low
1
vulns_medium
9
vulns_unknown
0
CI workflows (zizmor)skipped
Security postureok
check:dependency_updates
no
check:lockfiles
yes
check:security_policy
no
check:signed_commits
no
signed_commit_share
0.0%
unpinned_manifests
0
Release downloadsok
binary_assets
0
signals
0
suspicious
0

Findings

18 high15 medium17 low

SeverityRuleLocationMessageTool
high osv/GHSA-28wg-ghj8-5hjv package-lock.json [email protected] (npm) is affected by GHSA-28wg-ghj8-5hjv Dependencies (osv-scanner)
high osv/GHSA-2v37-7h3g-55p8 package-lock.json [email protected] (npm) is affected by GHSA-2v37-7h3g-55p8 Dependencies (osv-scanner)
high osv/GHSA-587h-7wmj-h5pm package-lock.json [email protected] (npm) is affected by GHSA-587h-7wmj-h5pm Dependencies (osv-scanner)
high osv/GHSA-68fv-2mgg-jv7q package-lock.json [email protected] (npm) is affected by GHSA-68fv-2mgg-jv7q Dependencies (osv-scanner)
high osv/GHSA-6g55-p6wh-862q package-lock.json [email protected] (npm) is affected by GHSA-6g55-p6wh-862q Dependencies (osv-scanner)
high osv/GHSA-c2c7-rcm5-vvqj package-lock.json [email protected] (npm) is affected by GHSA-c2c7-rcm5-vvqj Dependencies (osv-scanner)
high osv/GHSA-p9ff-h696-f583 package-lock.json [email protected] (npm) is affected by GHSA-p9ff-h696-f583 Dependencies (osv-scanner)
high osv/GHSA-px8p-9vwx-vf98 package-lock.json [email protected] (npm) is affected by GHSA-px8p-9vwx-vf98 Dependencies (osv-scanner)
high osv/GHSA-r28c-9q8g-f849 package-lock.json [email protected] (npm) is affected by GHSA-r28c-9q8g-f849 Dependencies (osv-scanner)
high osv/GHSA-xwg4-73v4-xw9w package-lock.json [email protected] (npm) is affected by GHSA-xwg4-73v4-xw9w Dependencies (osv-scanner)
high opengrep/javascript.browser.security.insecure-document-method src/main.ts:150 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/main.ts:150 User controlled data in a `eventsEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-document-method src/main.ts:226 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/main.ts:226 User controlled data in a `this.uiEl.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-document-method src/render/InspectorPanel.ts:97 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/render/InspectorPanel.ts:97 User controlled data in a `this.el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-document-method src/render/JournalPanel.ts:62 User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
high opengrep/javascript.browser.security.insecure-innerhtml src/render/JournalPanel.ts:62 User controlled data in a `this.el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] Static analysis (opengrep)
medium opengrep/javascript.lang.best-practice.javascript-confirm src/main.ts:81 found confirm() call; should this be in production code? Lint
medium osv/GHSA-3v7f-55p6-f55p package-lock.json [email protected] (npm) is affected by GHSA-3v7f-55p6-f55p Dependencies (osv-scanner)
medium osv/GHSA-4w7w-66w2-5vf9 package-lock.json [email protected] (npm) is affected by GHSA-4w7w-66w2-5vf9 Dependencies (osv-scanner)
medium osv/GHSA-698v-4r3x-3vcv package-lock.json [email protected] (npm) is affected by GHSA-698v-4r3x-3vcv Dependencies (osv-scanner)
medium osv/GHSA-fx2h-pf6j-xcff package-lock.json [email protected] (npm) is affected by GHSA-fx2h-pf6j-xcff Dependencies (osv-scanner)
medium osv/GHSA-fxqj-rqcc-2cmp package-lock.json [email protected] (npm) is affected by GHSA-fxqj-rqcc-2cmp Dependencies (osv-scanner)
medium osv/GHSA-qx2v-qp2m-jg93 package-lock.json [email protected] (npm) is affected by GHSA-qx2v-qp2m-jg93 Dependencies (osv-scanner)
medium osv/GHSA-r825-w8mm-5pxw package-lock.json [email protected] (npm) is affected by GHSA-r825-w8mm-5pxw Dependencies (osv-scanner)
medium osv/GHSA-rq7h-c2jc-7f22 package-lock.json [email protected] (npm) is affected by GHSA-rq7h-c2jc-7f22 Dependencies (osv-scanner)
medium osv/GHSA-v6wh-96g9-6wx3 package-lock.json [email protected] (npm) is affected by GHSA-v6wh-96g9-6wx3 Dependencies (osv-scanner)
medium opengrep/javascript.lang.security.html-in-template-string src/main.ts:151 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
medium opengrep/javascript.lang.security.html-in-template-string src/render/InspectorPanel.ts:134 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
medium opengrep/javascript.lang.security.html-in-template-string src/render/InspectorPanel.ts:148 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
medium opengrep/javascript.lang.security.html-in-template-string src/render/InspectorPanel.ts:97 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
medium opengrep/javascript.lang.security.html-in-template-string src/render/JournalPanel.ts:75 This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS).... Static analysis (opengrep)
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:228 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:230 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:231 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:232 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:233 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/main.ts:236 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render/JournalPanel.ts:39 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render/JournalPanel.ts:39 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/SkyLighting.ts:60 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/SkyLighting.ts:60 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/SkyLighting.ts:69 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/SkyLighting.ts:69 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/WaterPlane.ts:32 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/WaterPlane.ts:32 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/WaterPlane.ts:69 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low opengrep/javascript.lang.correctness.missing-template-string-indicator src/render3d/WaterPlane.ts:69 This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? Lint
low osv/GHSA-9jrq-w75r-8gcw package-lock.json [email protected] (npm) is affected by GHSA-9jrq-w75r-8gcw Dependencies (osv-scanner)

Tools and coverage

Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.

AnalyzerPillarStatusVersionFindingsNote
AI tool configurationAI provenanceoksignatures-v10
Explicit AI attributionAI provenanceoksignatures-v10
Release velocityAI provenanceskipped—0
Coding styleAI provenanceok—0
Commit velocityAI provenanceokprov-40
Complexity (lizard)Code qualityoklizard 1.25.10
DocumentationCode qualityok—0
Duplication (jscpd)Code qualityokrepotrust-dup-w60
LintCode qualityokopengrep 1.33.1; rules f1d2b562b41417
Tests and CICode qualityok—0
Type safetyCode qualityok—0
CI workflows (zizmor)Securityskipped—0
Dependencies (osv-scanner)Securityokosv-scanner version: 2.7.120
Release downloadsSecurityok—0
Security postureSecurityok—0
Package registriesSecurityok—0
Static analysis (opengrep)Securityokopengrep 1.33.1; rules f1d2b562b41413
OpenSSF ScorecardSecurityskipped—0no published OpenSSF Scorecard result for this repo
Secrets (gitleaks)Securityokgitleaks 8.30.10

Score history

Scores from different scoring versions aren't directly comparable.

ScoredCommitScoringAI provenanceQualitySecurity
2026-11-1444584a545e3cprov-5+qual-2+sec-20%5162
2026-11-1444584a545e3cprov-4+qual-2+sec-20%5162

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/yasirali0/drift/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/yasirali0/drift/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/yasirali0/drift/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/yasirali0/drift/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/yasirali0/drift/security.svg)](https://repotrust.synapticcyber.com/r/github.com/yasirali0/drift/)
Full text report
  • Repository: https://github.com/yasirali0/drift
  • Commit: 44584a545e3c40c18ba454133cbc5ed1060aa7d6
  • Generated: 2026-11-14T14:52:08+00:00
  • Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 possible 44% 100%
Code quality 51 weak 90% 100%
Security 62 weak 85% 100%

AI provenance

Weak signals consistent with AI-assisted development.

  • Explicitly attributed share (lower bound): 0.0%

  • Unattributed share in AI-consistent velocity bursts: 66.1%

  • Estimated AI-generated share: 0.0%

  • AI tooling configured in repo: github-copilot

  • Stylometry index: 0.19 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 2). Reported as a signal, not scored.

Month Lines added Attributed to AI
2026-03 5,479 0%

Evidence

  • .github/copilot-instructions.md (github-copilot configuration) (.github/copi)
  • 1,581 lines of first-party code in ~2.1h (766 lines/hour, 2 commit session) (4fcd532e6447)
  • 2,042 lines of first-party code in ~3.2h (635 lines/hour, 7 commit session) (f1e6f5d218cf)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 18% of function code in complex or long functions; 2% duplicated lines. Weakest area: testing.

Area Score
Complexity (lizard) 58
Duplication 90
Code smells (Opengrep) 79
Tests and CI 0
Documentation 40
Type safety 100
Process (Scorecard review/maintenance) n/a
  • Functions: 241; mean complexity 3.4, 90th percentile 8; 8 complex and 2 long functions
  • Duplicated lines: 1.8% of 3,863 compared
  • Tests: 0 test lines for 5,337 source lines (ratio 0.00); CI test commands: none detected; 0% of recent source commits also change tests
  • Docs missing or thin: license, contributing, changelog

Most complex functions:

Security

Security posture is weak: 20 known vulnerabilities in 6 dependencies; 8 high-severity SAST findings. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 62
Vulnerable dependencies (OSV) 45
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a

  • Known vulnerabilities: 20 in 6 packages (critical 0, high 10, medium 9, low 1)

  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/main.ts:150
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a eventsEl.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/main.ts:150
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/main.ts:226
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.uiEl.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/main.ts:226
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/render/InspectorPanel.ts:97
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.el.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/render/InspectorPanel.ts:97
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/render/JournalPanel.ts:62
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.el.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] src/render/JournalPanel.ts:62
high osv/GHSA-px8p-9vwx-vf98: [email protected] (npm) is affected by GHSA-px8p-9vwx-vf98 package-lock.json
high osv/GHSA-28wg-ghj8-5hjv: [email protected] (npm) is affected by GHSA-28wg-ghj8-5hjv package-lock.json
high osv/GHSA-2v37-7h3g-55p8: [email protected] (npm) is affected by GHSA-2v37-7h3g-55p8 package-lock.json
high osv/GHSA-xwg4-73v4-xw9w: [email protected] (npm) is affected by GHSA-xwg4-73v4-xw9w package-lock.json
high osv/GHSA-c2c7-rcm5-vvqj: [email protected] (npm) is affected by GHSA-c2c7-rcm5-vvqj package-lock.json
high osv/GHSA-6g55-p6wh-862q: [email protected] (npm) is affected by GHSA-6g55-p6wh-862q package-lock.json
high osv/GHSA-r28c-9q8g-f849: [email protected] (npm) is affected by GHSA-r28c-9q8g-f849 package-lock.json
high osv/GHSA-68fv-2mgg-jv7q: [email protected] (npm) is affected by GHSA-68fv-2mgg-jv7q package-lock.json
high osv/GHSA-587h-7wmj-h5pm: [email protected] (npm) is affected by GHSA-587h-7wmj-h5pm package-lock.json
high osv/GHSA-p9ff-h696-f583: [email protected] (npm) is affected by GHSA-p9ff-h696-f583 package-lock.json
medium opengrep/javascript.lang.security.html-in-template-string: This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low] src/main.ts:151
medium opengrep/javascript.lang.security.html-in-template-string: This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low] src/render/InspectorPanel.ts:97
medium opengrep/javascript.lang.security.html-in-template-string: This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low] src/render/InspectorPanel.ts:134
medium opengrep/javascript.lang.security.html-in-template-string: This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low] src/render/InspectorPanel.ts:148
medium opengrep/javascript.lang.security.html-in-template-string: This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low] src/render/JournalPanel.ts:75
medium osv/GHSA-3v7f-55p6-f55p: [email protected] (npm) is affected by GHSA-3v7f-55p6-f55p package-lock.json
medium osv/GHSA-fxqj-rqcc-2cmp: [email protected] (npm) is affected by GHSA-fxqj-rqcc-2cmp package-lock.json

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 5,337; test lines: 0
Language Lines
TypeScript 5,337