capaj/ingit

• Repository: https://github.com/capaj/ingit
• Commit: bdde02c1fe17a45b889f48d571bc61581d5a4e3c
• Generated: 2026-11-13T23:48:02+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Explicit AI attribution on 8% of first-party code added; an estimated 8% including velocity signals.

• Explicitly attributed share (lower bound): 7.7%
• Unattributed share in AI-consistent velocity bursts: 12.8%
• Estimated AI-generated share: 7.7%

• AI tooling configured in repo: claude-code, generic-agent

Current source lines last changed by AI-attributed commits: 2,425 of 35,657.

• Stylometry index: 0.04 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 3). Reported as a signal, not scored.

Evidence

• Claude Code: trailer 'Co-Authored-By: Claude' (8cdcdc20b221)
• OpenAI Codex: on merged branch (3fada0a177) (fdca1c061ca0)
• OpenAI Codex: on merged branch (3fada0a177) (bd067c7b64ab)
• Claude Code: trailer 'Co-Authored-By: Claude' (e3a06be7800f)
• Claude Code: trailer 'Co-Authored-By: Claude' (40e542c58042)
• Claude Code: trailer 'Co-Authored-By: Claude' (b1abdf27d52e)
• Claude Code: trailer 'Co-Authored-By: Claude' (7b4f71b7c3b2)
• .claude/skills/remotion-best-practices (claude-code configuration) (.claude/skil)
• CLAUDE.md (claude-code configuration) (CLAUDE.md)
• AGENTS.md (generic-agent configuration) (AGENTS.md)
• 1,384 lines of first-party code in ~1.1h (1,244 lines/hour, 2 commit session) (87f7fb2624fa)
• 3,043 lines of first-party code in ~4.6h (659 lines/hour, 5 commit session) (6a230962d1eb)
• 2,415 lines of first-party code in ~4.3h (566 lines/hour, 3 commit session) (31b87dfb3054)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.22, CI runs tests; 28% of function code in complex or long functions; 6% duplicated lines. Weakest area: lint.

• Functions: 2,477; mean complexity 3.2, 90th percentile 7; 70 complex and 23 long functions
• Duplicated lines: 5.6% of 27,239 compared
• Tests: 7,887 test lines for 35,657 source lines (ratio 0.22); CI test commands: bun test; 59% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• buildSegments in packages/graph-core/src/lane-ordering.ts: complexity 62, 158 lines
• buildEdgeRoutingData in apps/client/src/components/GraphCanvas.tsx: complexity 61, 160 lines
• GraphCanvas in apps/client/src/components/GraphCanvas.tsx: complexity 58, 767 lines
• (anonymous) in apps/client/src/components/GraphCanvas.tsx: complexity 51, 49 lines
• (anonymous) in apps/client/src/components/GraphCanvas.tsx: complexity 48, 176 lines

Security

Security posture is weak: 44 known vulnerabilities in 11 dependencies; 4 high-severity SAST findings; 15 high-severity workflow issues. Weakest area: ci actions.

• Known vulnerabilities: 44 in 11 packages (critical 0, high 23, medium 16, low 5)

• Posture checks passed: signed commits; missing: security policy, dependency updates, lockfiles

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 35,657; test lines: 7,887

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/capaj/ingit/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/capaj/ingit/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/capaj/ingit/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/capaj/ingit/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/capaj/ingit/security.svg)](https://repotrust.synapticcyber.com/r/github.com/capaj/ingit/)