lucaperl/paperless-local-ai

• Repository: https://github.com/lucaperl/paperless-local-ai
• Commit: 716044b35b7ed6208a1eaffcaf2dd78d15ef3744
• Generated: 2026-11-13T23:55:58+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 27.0%

• Estimated AI-generated share: 0.0%

• AI tooling configured in repo: generic-agent

• Stylometry index: 0.02 per 1,000 lines (narrated steps 0, placeholders 0, assistant phrasing 0, emoji 1). Reported as a signal, not scored.

Evidence

• AGENTS.md (generic-agent configuration) (AGENTS.md)
• 6,513 lines of first-party code in ~4.0h (1,616 lines/hour, PR #62) (0edcb2923c02)
• v0.3.4 → v0.3.5-rc.1: 6,513 lines in 0.46 days (14,046.3 lines/day) (v0.3.4...v0.)
• 2,743 lines of first-party code in ~4.0h (686 lines/hour, 1 commit session) (b35152ae89f4)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.14, CI runs tests; 25% of function code in complex or long functions; 5% duplicated lines. Weakest area: type safety.

• Functions: 972; mean complexity 4.5, 90th percentile 10; 42 complex and 21 long functions
• Duplicated lines: 5.5% of 17,371 compared
• Tests: 3,204 test lines for 22,779 source lines (ratio 0.14); CI test commands: pytest, go test, cargo test; 95% of recent source commits also change tests
• Docs missing or thin: none

Most complex functions:

• api in demo/mock-api.js: complexity 70, 124 lines
• _dispatch in src/core/prompt_ui.py: complexity 66, 235 lines
• merge_index_config in rust/core/src/rag.rs: complexity 46, 191 lines
• merge_chat_defaults in rust/core/src/rag.rs: complexity 41, 150 lines
• validate_config in src/core/prompt_runtime.py: complexity 41, 85 lines

Security

Security posture is adequate: 14 known vulnerabilities in 7 dependencies; 4 high-severity SAST findings; 37 high-severity workflow issues. Weakest area: ci actions.

• Known vulnerabilities: 14 in 7 packages (critical 0, high 2, medium 2, low 2)

• Posture checks passed: security policy, dependency updates, signed commits; missing: lockfiles

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Repository profile

• Source lines: 22,779; test lines: 3,204