RepoTrust

Leaderboard github.com

FrozenNode/Laravel-Administrator

An administrative interface package for Laravel

  • View repository ↗
  • PHP
  • ★ 1,912
  • commit 34d604c2029c
  • scored 2026-11-13
  • scoring prov-4+qual-2+sec-2

AI provenance

0%

none-detected

Confidence
65%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

67/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

54/100

weak

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 0 none-detected 65% 100%
Code quality 67 adequate 90% 100%
Security 54 weak 85% 100%

AI provenance

No AI attribution or AI-consistent velocity signals detected.

  • Explicitly attributed share (lower bound): 0.0%

  • Unattributed share in AI-consistent velocity bursts: 0.0%

  • Estimated AI-generated share: 0.0%

  • Stylometry index: 0.12 per 1,000 lines (narrated steps 4, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.

Month Lines added Attributed to AI
2015-01 48 0%
2015-02 775 0%
2015-03 39 0%
2015-07 18 0%
2015-08 95 0%
2015-09 32 0%
2015-10 90 0%
2015-11 8 0%
2015-12 33 0%
2016-01 2 0%
2016-03 2 0%
2016-05 7 0%

Evidence

  • step-by-step narration comment: // finally, fallback on the calculated width of the element (public/js/jq)
  • step-by-step narration comment: //now we can instantiate the object (src/Frozenno)
  • step-by-step narration comment: //now we do some final organization to categorize these columns (useful later in the sorting) (src/Frozenno)
  • step-by-step narration comment: //now we need to limit and offset the rows in remembrance of our dear lost friend paginate() (src/Frozenno)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.13, CI runs tests; 10% of function code in complex or long functions; 7% duplicated lines. Weakest area: process.

Area Score
Complexity (lizard) 74
Duplication 66
Code smells (Opengrep) 70
Tests and CI 67
Documentation 100
Type safety n/a
Process (Scorecard review/maintenance) 20
  • Functions: 6,363; mean complexity 3.4, 90th percentile 7; 154 complex and 7 long functions
  • Duplicated lines: 7.0% of 23,819 compared
  • Tests: 4,262 test lines for 33,981 source lines (ratio 0.13); CI test commands: phpunit; 13% of recent source commits also change tests
  • Docs missing or thin: none

Most complex functions:

Security

Security posture is weak: 54 high-severity SAST findings. Weakest area: posture.

Area Score
Secrets (gitleaks, tree + history) 100
Static analysis (Opengrep) 36
Vulnerable dependencies (OSV) n/a
CI workflows (zizmor) n/a
Posture (policy, updates, signing, lockfiles) 0
OpenSSF Scorecard 25
  • Posture checks passed: none; missing: security policy, dependency updates, signed commits, lockfiles
  • OpenSSF Scorecard aggregate: 2.6/10 (published 2026-11-09)

Top findings

Severity Finding Location
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a a.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a a.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a a.$.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:72
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:73
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.$.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:73
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:391
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:656
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a g.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:656
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:877
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a d.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/ckeditor.js:877
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.getElement(this.ID.R_HEX).innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.getElement(this.ID.G_HEX).innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.getElement(this.ID.B_HEX).innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:179
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:198
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.getElement(this.ID.CONTROLS_LABEL).innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/uicolor/yui/yui.js:198
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a this.getInputElement().$.children[0].innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/wsc/dialogs/wsc.js:56
high opengrep/javascript.browser.security.insecure-document-method: User controlled data in methods like innerHTML, outerHTML or document.write is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65
high opengrep/javascript.browser.security.insecure-innerhtml: User controlled data in a c.IgnoreAllCapsWords.getElement().$.lastChild.innerHTML is an anti-pattern that can lead to XSS vulnerabilities [confidence low] public/js/ckeditor/plugins/wsc/dialogs/wsc.js:65

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 33,981; test lines: 4,262
Language Lines
JavaScript 21,408
PHP 16,766
Shell 69

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/FrozenNode/Laravel-Administrator/security.svg)](https://repotrust.synapticcyber.com/r/github.com/FrozenNode/Laravel-Administrator/)