crspytopgn/openmcm2

• Repository: https://github.com/crspytopgn/openmcm2
• Commit: 3a455e528623201fb9032ae9bdcbdeadd8e4e023
• Generated: 2026-11-13T23:56:18+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals.

• Explicitly attributed share (lower bound): 100.0%
• Unattributed share in AI-consistent velocity bursts: 0.0%
• Estimated AI-generated share: 100.0%

Current source lines last changed by AI-attributed commits: 56,467 of 56,467.

Too few lines in one group to compare finding densities.

Evidence

• Claude Code: author email noreply@anthropic.com (fb08a6aee32c)
• Claude Code: author email noreply@anthropic.com (1d7407a5c3e9)
• Claude Code: author email noreply@anthropic.com (5ade6f1dd116)
• Claude Code: author email noreply@anthropic.com (63adf597fb79)
• Claude Code: author email noreply@anthropic.com (a0e42f592256)
• Claude Code: author email noreply@anthropic.com (6ed40aab741b)
• Claude Code: trailer 'Co-authored-by: Claude' (7b192ac47d58)
• Claude Code: trailer 'Co-authored-by: Claude' (c2d8f4563cf5)
• Claude Code: trailer 'Co-authored-by: Claude' (5ae9b62d7846)
• Claude Code: author email noreply@anthropic.com (f6853685b81b)
• Claude Code: committer email noreply@anthropic.com (a33038a08b16)
• Claude Code: committer email noreply@anthropic.com (639aa4f55a99)
• Claude Code: committer email noreply@anthropic.com (7707988f2112)
• Claude Code: committer email noreply@anthropic.com (2c8ac6d9f643)
• Claude Code: committer email noreply@anthropic.com (0dce22196e0f)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.01, CI runs tests; 31% of function code in complex or long functions; 2% duplicated lines. Weakest area: complexity.

• Functions: 1,963; mean complexity 4.6, 90th percentile 10; 105 complex and 43 long functions
• Duplicated lines: 2.4% of 43,606 compared
• Tests: 399 test lines for 56,467 source lines (ratio 0.01); CI test commands: go test, cargo test; 2% of recent source commits also change tests
• Docs missing or thin: contributing, changelog

Most complex functions:

• window_event in crates/mm2-viewer/src/main.rs: complexity 130, 330 lines
• main in crates/mm2-viewer/src/main.rs: complexity 108, 535 lines
• scan_code in crates/mm2-viewer/src/screens/keys.rs: complexity 100, 105 lines
• update in crates/mm2-viewer/src/sound.rs: complexity 79, 234 lines
• update in crates/mm2-viewer/src/race.rs: complexity 69, 188 lines

Security

Security posture is adequate: 3 known vulnerabilities in 3 dependencies; 17 high-severity workflow issues. Weakest area: ci actions.

• Known vulnerabilities: 3 in 3 packages (critical 0, high 0, medium 1, low 0)

• Posture checks passed: signed commits; missing: security policy, dependency updates, lockfiles

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

• binary-release-asset: release v0.3.2 ships openmcm2-v0.3.2-linux-x86_64.tar.gz (11 downloads)
• binary-release-asset: release v0.3.2 ships openmcm2-v0.3.2-macos-arm64.zip (4 downloads)
• binary-release-asset: release v0.3.2 ships openmcm2-v0.3.2-macos-x86_64.zip (2 downloads)
• binary-release-asset: release v0.3.2 ships openmcm2-v0.3.2-windows-x86_64.zip (23 downloads)
• binary-release-asset: release v0.3.1 ships openmcm2-v0.3.1-linux-x86_64.tar.gz (34 downloads)

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

• Source lines: 56,467; test lines: 399