0Chencc/clawgod

• Repository: https://github.com/0Chencc/clawgod
• Commit: a08cfc96c7a226e2a7150bcb532f9945c15ee032
• Generated: 2026-11-13T23:59:59+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development. 2 commit(s) carry explicit AI attribution, too few to characterize the codebase.

• Explicitly attributed share (lower bound): 0.3%
• Unattributed share in AI-consistent velocity bursts: 67.2%
• Estimated AI-generated share: 0.3%

• AI tooling configured in repo: generic-agent

Current source lines last changed by AI-attributed commits: 97 of 35,282.

Too few lines in one group to compare finding densities.

• Stylometry index: 0.48 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 13). Reported as a signal, not scored.

Evidence

• Claude Code: PR description attribution (fddda02630e6)
• Claude Code: trailer 'Co-Authored-By: Claude' (5fb257242258)
• 19,957 lines of first-party code in ~4.0h (4,989 lines/hour, 1 commit session) (a1a91769f88a)
• 15,102 lines of first-party code in ~4.1h (3,701 lines/hour, 2 commit session) (a08cfc96c7a2)
• AGENTS.md (generic-agent configuration) (AGENTS.md)
• v2.0.4 → v2.1.0: 19,957 lines in 0.66 days (30,162.2 lines/day) (v2.0.4...v2.)
• 3,828 lines of first-party code in ~5.1h (753 lines/hour, 4 commit session) (aba6be8948ee)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.10, CI runs tests; 28% of function code in complex or long functions; 93% duplicated lines. Weakest area: duplication.

• Functions: 671; mean complexity 5.0, 90th percentile 11; 45 complex and 1 long functions
• Duplicated lines: 92.8% of 26,886 compared
• Tests: 3,365 test lines for 35,282 source lines (ratio 0.10); CI test commands: bun test; 25% of recent source commits also change tests
• Docs missing or thin: changelog

Most complex functions:

• (anonymous) in src/shared/ast-patches.mjs: complexity 87, 126 lines
• pp$8.parseStatement in src/shared/acorn.mjs: complexity 51, 77 lines
• pp$5.parseExprAtom in src/shared/acorn.mjs: complexity 48, 87 lines
• pp.getTokenFromCode in src/shared/acorn.mjs: complexity 47, 51 lines
• pairingScopeResolver in src/shared/ast-patches.mjs: complexity 39, 47 lines

Security

Security posture is weak: 21 known vulnerabilities in 8 dependencies; 3 high-severity SAST findings; 24 high-severity workflow issues. Weakest area: posture.

• Known vulnerabilities: 21 in 8 packages (critical 0, high 7, medium 8, low 4)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

• binary-release-asset: release v2.3.0 ships clawgod-import-windows-x64.exe (1403 downloads)
• binary-release-asset: release v2.3.0 ships install.ps1 (3012 downloads)
• binary-release-asset: release v2.2.0 ships clawgod-import-windows-x64.exe (314 downloads)
• binary-release-asset: release v2.2.0 ships install.ps1 (824 downloads)
• binary-release-asset: release v2.1.0 ships clawgod-import-windows-x64.exe (181 downloads)

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

• Source lines: 35,282; test lines: 3,365

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/0Chencc/clawgod/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/0Chencc/clawgod/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/0Chencc/clawgod/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/0Chencc/clawgod/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/0Chencc/clawgod/security.svg)](https://repotrust.synapticcyber.com/r/github.com/0Chencc/clawgod/)