RAIT-09/obsidian-agent-client

• Repository: https://github.com/RAIT-09/obsidian-agent-client
• Commit: 3d069c91636588be4e65d955e670403a9ea642d8
• Generated: 2026-11-14T00:13:00+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Explicit AI attribution on 1% of first-party code added; an estimated 1% including velocity signals.

• Explicitly attributed share (lower bound): 1.5%
• Unattributed share in AI-consistent velocity bursts: 19.2%
• Estimated AI-generated share: 1.5%

• AI tooling configured in repo: claude-code, gemini, generic-agent, github-copilot

Current source lines last changed by AI-attributed commits: 132 of 27,032.

Too few lines in one group to compare finding densities.

• Stylometry index: 0.13 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 7). Reported as a signal, not scored.

Evidence

• Claude Code: trailer 'Co-Authored-By: Claude' (26bf9442dbf5)
• Claude Code: trailer 'Co-Authored-By: Claude' (f2eea3827e42)
• OpenAI Codex: on merged branch (1ba744f235) (cb92f4b6ce91)
• Claude Code: trailer 'Co-Authored-By: Claude' (a1c3c7d9b4b1)
• Claude Code: trailer 'Co-Authored-By: Claude' (ca5c0f188ace)
• Claude Code: trailer 'Co-Authored-By: Claude' (0e2fa4e7bdec)
• Claude Code: trailer 'Co-Authored-By: Claude' (2170e6f761aa)
• Claude Code: trailer 'Co-Authored-By: Claude' (45bfee291f11)
• Claude Code: trailer 'Co-Authored-By: Claude' (8a420a479419)
• Claude Code: trailer 'Co-Authored-By: Claude' (3fd00c7482a8)
• Claude Code: trailer 'Co-Authored-By: Claude' (07e087728012)
• GitHub Copilot coding agent: author copilot-swe-agent[bot] (8d9f0e298575)
• GitHub Copilot coding agent: author copilot-swe-agent[bot] (991afa4062a5)
• GitHub Copilot coding agent: author copilot-swe-agent[bot] (0535c11e6dd6)
• GitHub Copilot coding agent: author copilot-swe-agent[bot] (d7108743bb65)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.12, CI runs tests; 16% of function code in complex or long functions; 4% duplicated lines. Weakest area: type safety.

• Functions: 1,425; mean complexity 2.5, 90th percentile 5; 15 complex and 10 long functions
• Duplicated lines: 4.5% of 18,944 compared
• Tests: 3,155 test lines for 27,032 source lines (ratio 0.12); CI test commands: npm test; 17% of recent source commits also change tests
• Docs missing or thin: changelog

Most complex functions:

• SessionHistoryContent in src/ui/SessionHistoryModal.tsx: complexity 27, 141 lines
• InputArea in src/ui/InputArea.tsx: complexity 26, 265 lines
• parseAgentBlock in src/utils/agent-block-parser.ts: complexity 26, 103 lines
• initialize in src/acp/acp-client.ts: complexity 22, 186 lines
• sessionUpdate in src/acp/acp-handler.ts: complexity 21, 107 lines

Security

Security posture is weak: 61 known vulnerabilities in 20 dependencies; 3 high-severity SAST findings; 12 high-severity workflow issues. Weakest area: posture.

• Known vulnerabilities: 61 in 20 packages (critical 0, high 33, medium 24, low 4)

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 27,032; test lines: 3,155