dhq-boiler/Unofficial-VS-MCP

• Repository: https://github.com/dhq-boiler/Unofficial-VS-MCP
• Commit: 4a208ea46f24be30217c462a26cad99c259550cd
• Generated: 2026-11-14T00:20:38+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 45.5%

• Estimated AI-generated share: 0.0%

• AI tooling configured in repo: claude-code

• Stylometry index: 0.17 per 1,000 lines (narrated steps 3, placeholders 0, assistant phrasing 0, emoji 0). Reported as a signal, not scored.

Evidence

• CLAUDE.md (claude-code configuration) (CLAUDE.md)
• 1,356 lines of first-party code in ~0.9h (1,573 lines/hour, 3 commit session) (193b2a9a1885)
• 2,433 lines of first-party code in ~2.6h (921 lines/hour, 8 commit session) (5fd5190efa08)
• 2,970 lines of first-party code in ~4.2h (707 lines/hour, 7 commit session) (73d2d17191e9)
• 2,406 lines of first-party code in ~3.8h (630 lines/hour, 6 commit session) (fe0d09e99b5d)
• step-by-step narration comment: // Step 1: Stop (scoped fg lock + event-anchored tail). (src/VsMcp.Ex)
• step-by-step narration comment: // Step 2: Start (scoped fg lock + 3-phase window-anchored tail). (src/VsMcp.Ex)
• step-by-step narration comment: // FIRST, otherwise PreserveForegroundForDebug short-circuits. (src/VsMcp.Ex)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is weak: test-to-source ratio 0.01, no CI test run detected; 24% of function code in complex or long functions; 9% duplicated lines. Weakest area: testing.

• Functions: 474; mean complexity 5.6, 90th percentile 13; 32 complex and 10 long functions
• Duplicated lines: 9.4% of 10,419 compared
• Tests: 159 test lines for 17,437 source lines (ratio 0.01); CI test commands: none detected; 1% of recent source commits also change tests
• Docs missing or thin: contributing

Most complex functions:

• TestTools::TestRunAsync in src/VsMcp.Extension/Tools/TestTools.cs: complexity 44, 158 lines
• UiTools::BuildCompactNode in src/VsMcp.Extension/Tools/UiTools.cs: complexity 43, 71 lines
• UiTools::UiMouseWheelAsync in src/VsMcp.Extension/Tools/UiTools.cs: complexity 37, 141 lines
• TestTools::TestDiscoverAsync in src/VsMcp.Extension/Tools/TestTools.cs: complexity 36, 131 lines
• UiTools::UiFindElementsAsync in src/VsMcp.Extension/Tools/UiTools.cs: complexity 35, 153 lines

Security

Security posture is adequate: 6 high-severity workflow issues. Weakest area: posture.

• Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 17,437; test lines: 159