k45sle/Claude-auto-pause
Claude Code plugin: stops Claude before your usage limit and saves a checked handoff note, so a new chat picks up where it left off.
- Repository: https://github.com/k45sle/Claude-auto-pause
- Commit:
4b2a8a21bcaa9267dc23d26c00d3a89b462825b3 - Generated: 2026-11-13T23:48:17+00:00
- Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 100 | explicit | 85% | 100% |
| Code quality | 65 | adequate | 90% | 100% |
| Security | 68 | weak | 85% | 100% |
AI provenance
Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals.
- Explicitly attributed share (lower bound): 100.0%
- Unattributed share in AI-consistent velocity bursts: 0.0%
- Estimated AI-generated share: 100.0%
| AI tool | Attributed commits | Lines added |
|---|---|---|
| Claude Code | 59 | 2,542 |
Current source lines last changed by AI-attributed commits: 947 of 947.
Too few lines in one group to compare finding densities.
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2026-10 | 2,233 | 100% |
| 2026-11 | 309 | 100% |
Evidence
- Claude Code: trailer 'Co-Authored-By: Claude' (ed95cce9a8b7)
- Claude Code: trailer 'Co-Authored-By: Claude' (97daad286d87)
- Claude Code: trailer 'Co-Authored-By: Claude' (9dc46d82602d)
- Claude Code: trailer 'Co-Authored-By: Claude' (6bd041295747)
- Claude Code: trailer 'Co-Authored-By: Claude' (273dcf70e157)
- Claude Code: trailer 'Co-Authored-By: Claude' (7e336af84994)
- Claude Code: trailer 'Co-Authored-By: Claude' (b9a83392697e)
- Claude Code: trailer 'Co-Authored-By: Claude' (b1bf7d2a9ce7)
- Claude Code: trailer 'Co-Authored-By: Claude' (312897beaf0d)
- Claude Code: trailer 'Co-Authored-By: Claude' (12d86219ee79)
- Claude Code: trailer 'Co-Authored-By: Claude' (0fd05aebcff4)
- Claude Code: trailer 'Co-Authored-By: Claude' (64d8d64c1d53)
- Claude Code: trailer 'Co-Authored-By: Claude' (a64864b04c0f)
- Claude Code: trailer 'Co-Authored-By: Claude' (9b548747dcec)
- Claude Code: trailer 'Co-Authored-By: Claude' (46ebadad12f9)
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is adequate: test-to-source ratio 1.29, no CI test run detected; 40% of function code in complex or long functions; 0% duplicated lines. Weakest area: complexity.
| Area | Score |
|---|---|
| Complexity (lizard) | 30 |
| Duplication | 100 |
| Code smells (Opengrep) | 88 |
| Tests and CI | 55 |
| Documentation | 85 |
| Type safety | 40 |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 125; mean complexity 3.7, 90th percentile 8; 6 complex and 0 long functions
- Duplicated lines: 0.0% of 792 compared
- Tests: 1,223 test lines for 947 source lines (ratio 1.29); CI test commands: none detected; 73% of recent source commits also change tests
- Docs missing or thin: contributing
Most complex functions:
- (anonymous) in hooks/register.ts: complexity 71, 71 lines
- onReading in hooks/register.ts: complexity 25, 45 lines
- validate in hooks/register.ts: complexity 24, 25 lines
- resumeCheck in hooks/register.ts: complexity 19, 24 lines
- writeFallback in hooks/register.ts: complexity 19, 46 lines
Security
Security posture is weak: no high-impact findings. Weakest area: posture.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 88 |
| Static analysis (Opengrep) | 77 |
| Vulnerable dependencies (OSV) | n/a |
| CI workflows (zizmor) | n/a |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
- Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-regexp: RegExp() called with a re function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled i [confidence low] |
hooks/register.ts:93 |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-regexp: RegExp() called with a f function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low] |
hooks/register.ts:102 |
| medium | opengrep/javascript.lang.security.audit.detect-non-literal-regexp: RegExp() called with a f function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlled in [confidence low] |
hooks/register.ts:103 |
| low | gitleaks/stripe-access-token: Possible stripe-access-token secret in the current tree (test/docs/example file) |
hooks/register.test.ts:997 |
| low | gitleaks/jwt: Possible jwt secret in the current tree (test/docs/example file) |
hooks/register.test.ts:997 |
| low | gitleaks/gitlab-pat: Possible gitlab-pat secret in the current tree (test/docs/example file) |
hooks/register.test.ts:997 |
| low | gitleaks/generic-api-key: Possible generic-api-key secret in the current tree (test/docs/example file) |
hooks/register.test.ts:733 |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Repository profile
- Source lines: 947; test lines: 1,223
| Language | Lines |
|---|---|
| TypeScript | 1,926 |
| Shell | 244 |