RepoTrust

Leaderboard github.com

AurynRobotics/qt-widgeteer

Remote control your Qt applications

  • View repository ↗
  • C++
  • ★ 26
  • commit 68646d4e03c3
  • scored 2026-11-13
  • scoring prov-4+qual-2+sec-2

AI provenance

93%

explicit

Confidence
80%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

77/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

66/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 93 explicit 80% 100%
Code quality 77 adequate 90% 100%
Security 66 weak 85% 100%

AI provenance

Explicit AI attribution on 93% of first-party code added; an estimated 93% including velocity signals.

  • Explicitly attributed share (lower bound): 93.3%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 93.3%
AI tool Attributed commits Lines added
Claude Code 30 17,769
  • AI tooling configured in repo: claude-code

Current source lines last changed by AI-attributed commits: 6,788 of 7,563.

Findings per 1,000 lines AI-attributed Other Ratio
Quality 0.0 0.0 n/a
Security 0.0 0.0 n/a
  • Stylometry index: 1.06 per 1,000 lines (narrated steps 8, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.
Month Lines added Attributed to AI
2026-01 17,707 100%
2026-02 1,335 5%

Evidence

  • Claude Code: trailer 'Co-Authored-By: Claude' (4e2ebb0c91b5)
  • Claude Code: trailer 'Co-Authored-By: Claude' (45ad7a32d005)
  • Claude Code: trailer 'Co-Authored-By: Claude' (7d7cdfdee73d)
  • Claude Code: trailer 'Co-Authored-By: Claude' (8f430ed7f7e2)
  • Claude Code: trailer 'Co-Authored-By: Claude' (a9979a955b5b)
  • Claude Code: trailer 'Co-Authored-By: Claude' (772ee167e0f4)
  • Claude Code: trailer 'Co-Authored-By: Claude' (cf5d61d52e69)
  • Claude Code: trailer 'Co-Authored-By: Claude' (406c0ce503a9)
  • Claude Code: trailer 'Co-Authored-By: Claude' (71f2b8f2e709)
  • Claude Code: trailer 'Co-Authored-By: Claude' (452bd140b375)
  • Claude Code: trailer 'Co-Authored-By: Claude' (b39a29a3f4b3)
  • Claude Code: trailer 'Co-Authored-By: Claude' (36337b5fae17)
  • Claude Code: trailer 'Co-Authored-By: Claude' (ae2820971bba)
  • Claude Code: trailer 'Co-Authored-By: Claude' (5579fc2bfe8a)
  • Claude Code: trailer 'Co-Authored-By: Claude' (bd353bb8c072)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 1.14, CI runs tests; 29% of function code in complex or long functions; 6% duplicated lines. Weakest area: complexity.

Area Score
Complexity (lizard) 42
Duplication 69
Code smells (Opengrep) 100
Tests and CI 100
Documentation 65
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 261; mean complexity 4.4, 90th percentile 9; 13 complex and 5 long functions
  • Duplicated lines: 6.3% of 5,024 compared
  • Tests: 8,612 test lines for 7,563 source lines (ratio 1.14); CI test commands: ctest, unittest; 53% of recent source commits also change tests
  • Docs missing or thin: contributing, changelog

Most complex functions:

Security

Security posture is weak: 13 high-severity workflow issues. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 100
Vulnerable dependencies (OSV) n/a
CI workflows (zizmor) 6
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard n/a
  • Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Severity Finding Location
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:16
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:19
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:46
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:59
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:62
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:119
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:135
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:138
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:147
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:158
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:193
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:196
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:201
medium zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] .github/workflows/ci.yml:15
medium zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] .github/workflows/ci.yml:58
medium zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] .github/workflows/ci.yml:134
medium zizmor/artipacked: credential persistence through GitHub Actions artifacts [confidence low] .github/workflows/ci.yml:192
medium zizmor/excessive-permissions: overly broad permissions [confidence medium] .github/workflows/ci.yml:1
medium zizmor/excessive-permissions: overly broad permissions [confidence medium] .github/workflows/ci.yml:10
medium zizmor/excessive-permissions: overly broad permissions [confidence medium] .github/workflows/ci.yml:53
medium zizmor/excessive-permissions: overly broad permissions [confidence medium] .github/workflows/ci.yml:128
medium zizmor/excessive-permissions: overly broad permissions [confidence medium] .github/workflows/ci.yml:187

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 7,563; test lines: 8,612
Language Lines
C++ 13,049
Python 1,625
C 1,372
Shell 129

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/AurynRobotics/qt-widgeteer/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/AurynRobotics/qt-widgeteer/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/AurynRobotics/qt-widgeteer/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/AurynRobotics/qt-widgeteer/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/AurynRobotics/qt-widgeteer/security.svg)](https://repotrust.synapticcyber.com/r/github.com/AurynRobotics/qt-widgeteer/)