defunkt/dotjs
~/.js
insufficient-sourcesuspicious-distribution
- Repository: https://github.com/defunkt/dotjs
- Commit:
434eaba374b02a3ee7e056408bb1c0fe76e837d3 - Generated: 2026-11-13T23:29:13+00:00
- Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2
Scores
Insufficient first-party source code to score quality or security (under 100 lines). An empty or README-only repository is not evidence of safety.
Caution: signals consistent with a malware lure. This repository appears to exist mainly to distribute a download (see Distribution signals below). Do not run its release files without independent verification.
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 0 | none-detected | 64% | 100% |
| Code quality | not scored | |||
| Security | not scored |
AI provenance
No AI attribution or AI-consistent velocity signals detected.
- Explicitly attributed share (lower bound): 0.0%
- Unattributed share in AI-consistent velocity bursts: 0.0%
- Estimated AI-generated share: 0.0%
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2011-02 | 67 | 0% |
| 2011-10 | 1 | 0% |
| 2012-10 | 1 | 0% |
| 2013-01 | 1 | 0% |
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Distribution signals
- thin-source: 10 lines of source code
- readme-download-lure: links to file hosts or shorteners: bit.ly
Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.
Repository profile
- Source lines: 10; test lines: 0
| Language | Lines |
|---|---|
| JavaScript | 10 |