RepoTrust

Leaderboard github.com

dollspace-gay/proto-blue

  • View repository ↗
  • Rust
  • ★ 11
  • commit 52d4b2b37fc8
  • scored 2026-11-13
  • scoring prov-4+qual-2+sec-2

AI provenance

67%

explicit

Confidence
93%
Coverage
100%

Estimated share of AI-generated code. Explicit attribution is a lower bound.

Code quality

70/100

adequate

Confidence
90%
Coverage
100%

Complexity, duplication, lint density, tests, CI, docs and review process.

Security

44/100

poor

Confidence
85%
Coverage
100%

Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.

Scores

Pillar Score Signal Confidence Coverage
AI provenance (estimated AI-generated share) 67 explicit 93% 100%
Code quality 70 adequate 90% 100%
Security 44 poor 85% 100%

AI provenance

Explicit AI attribution on 67% of first-party code added; an estimated 67% including velocity signals.

  • Explicitly attributed share (lower bound): 67.4%
  • Unattributed share in AI-consistent velocity bursts: 0.0%
  • Estimated AI-generated share: 67.4%
AI tool Attributed commits Lines added
Claude Code 70 59,697

Current source lines last changed by AI-attributed commits: 47,745 of 72,166.

Findings per 1,000 lines AI-attributed Other Ratio
Quality 0.0 0.0 n/a
Security 0.063 0.0 n/a
  • Stylometry index: 0.12 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 1, emoji 14). Reported as a signal, not scored.
Month Lines added Attributed to AI
2026-02 27,326 0%
2026-03 2,265 100%
2026-04 50,434 100%
2026-05 7,206 97%
2026-10 120 0%
2026-11 1,206 0%

Evidence

  • Claude Code: trailer 'Co-Authored-By: Claude' (579761684257)
  • Claude Code: trailer 'Co-Authored-By: Claude' (14f82459290a)
  • Claude Code: trailer 'Co-Authored-By: Claude' (5bc0a9372a93)
  • Claude Code: trailer 'Co-Authored-By: Claude' (e36a5fa981dd)
  • Claude Code: trailer 'Co-Authored-By: Claude' (eeb694630fc2)
  • Claude Code: trailer 'Co-Authored-By: Claude' (4a704317b1fe)
  • Claude Code: trailer 'Co-Authored-By: Claude' (30be5d487be0)
  • Claude Code: trailer 'Co-Authored-By: Claude' (9c539a540284)
  • Claude Code: trailer 'Co-Authored-By: Claude' (a21c555cee60)
  • Claude Code: trailer 'Co-Authored-By: Claude' (a6d1f67b1499)
  • Claude Code: trailer 'Co-Authored-By: Claude' (1a80d19f8960)
  • Claude Code: trailer 'Co-Authored-By: Claude' (dd1db41dd2a9)
  • Claude Code: trailer 'Co-Authored-By: Claude' (7455b348c9bd)
  • Claude Code: trailer 'Co-Authored-By: Claude' (318b06927b75)
  • Claude Code: trailer 'Co-Authored-By: Claude' (27fd59a26f32)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.11, CI runs tests; 5% of function code in complex or long functions; 35% duplicated lines. Weakest area: duplication.

Area Score
Complexity (lizard) 85
Duplication 12
Code smells (Opengrep) 100
Tests and CI 80
Documentation 60
Type safety n/a
Process (Scorecard review/maintenance) n/a
  • Functions: 2,923; mean complexity 2.7, 90th percentile 6; 21 complex and 7 long functions
  • Duplicated lines: 35.1% of 53,711 compared
  • Tests: 7,772 test lines for 72,166 source lines (ratio 0.11); CI test commands: go test, cargo test; 39% of recent source commits also change tests
  • Docs missing or thin: license, contributing

Most complex functions:

Security

Security posture is poor: 1 possible secret(s) in the tree, 0 only in history; 47 known vulnerabilities in 17 dependencies; 23 high-severity workflow issues. Weakest area: ci actions.

Area Score
Secrets (gitleaks, tree + history) 46
Static analysis (Opengrep) 100
Vulnerable dependencies (OSV) 31
CI workflows (zizmor) 1
Posture (policy, updates, signing, lockfiles) 20
OpenSSF Scorecard n/a
  • Known vulnerabilities: 47 in 17 packages (critical 0, high 6, medium 9, low 4)

  • Posture checks passed: signed commits; missing: security policy, dependency updates, lockfiles

Top findings

Severity Finding Location
high gitleaks/jwt: Possible jwt secret in the current tree proto-blue/crates/proto-blue-common/src/obfuscate.rs:243
high osv/RUSTSEC-2026-0509: hickory-net@0.26.1 (crates.io) is affected by RUSTSEC-2026-0509 proto-blue/Cargo.lock
high osv/GHSA-6w6g-hm98-mhgm: hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0513, GHSA-6w6g-hm98-mhgm proto-blue/Cargo.lock
high osv/GHSA-5j98-2g5x-46v6: hickory-resolver@0.26.1 (crates.io) is affected by RUSTSEC-2026-0514, GHSA-5j98-2g5x-46v6 proto-blue/Cargo.lock
high osv/GHSA-mrhx-c7xc-m3w5: zod@3.25.76 (npm) is affected by GHSA-mrhx-c7xc-m3w5 proto-blue/crates/proto-blue-interop-tests/ts-runner/package-lock.json
high osv/GHSA-4w2j-m93h-cj5j: quinn-proto@0.11.14 (crates.io) is affected by RUSTSEC-2026-0185, GHSA-4w2j-m93h-cj5j proto-blue/scripts/wildscrape/Cargo.lock
high osv/RUSTSEC-2026-0340: quinn-proto@0.11.14 (crates.io) is affected by RUSTSEC-2026-0340 proto-blue/scripts/wildscrape/Cargo.lock
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:22
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:23
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:26
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:42
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:43
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:46
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:102
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:103
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:104
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:115
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:116
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/ci.yml:117
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/fuzz.yml:47
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/fuzz.yml:49
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/fuzz.yml:50
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/fuzz.yml:68
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/interop.yml:29
high zizmor/unpinned-uses: unpinned action reference [confidence high] .github/workflows/interop.yml:30

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

  • Source lines: 72,166; test lines: 7,772
Language Lines
Rust 79,459
JavaScript 449
Shell 30

Embed a badge

Maintainers can show these in a README. Badges update when the repository is re-scored.

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/dollspace-gay/proto-blue/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/dollspace-gay/proto-blue/)
[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/dollspace-gay/proto-blue/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/dollspace-gay/proto-blue/)
[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/dollspace-gay/proto-blue/security.svg)](https://repotrust.synapticcyber.com/r/github.com/dollspace-gay/proto-blue/)