rustic-ai/codeprism

• Repository: https://github.com/rustic-ai/codeprism
• Commit: 8115b77568c16d1eb0710396da39232b33663fc0
• Generated: 2026-11-13T23:45:18+00:00
• Scorer 0.1.0, scoring prov-4+qual-2+sec-2, report schema v2

Scores

AI provenance

Weak signals consistent with AI-assisted development.

• Explicitly attributed share (lower bound): 0.0%

• Unattributed share in AI-consistent velocity bursts: 61.8%

• Estimated AI-generated share: 0.0%

• AI tooling configured in repo: cursor, generic-agent

• Stylometry index: 1.47 per 1,000 lines (narrated steps 7, placeholders 18, assistant phrasing 0, emoji 209). Reported as a signal, not scored.

Evidence

• 8,626 lines of first-party code in ~2.7h (3,234 lines/hour, 7 commit session) (6fc9c0141cbc)
• 7,593 lines of first-party code in ~2.5h (3,038 lines/hour, 2 commit session) (2d4a9b794d41)
• 2,607 lines of first-party code in ~0.9h (2,908 lines/hour, 2 commit session) (5d027c6b7a3e)
• 6,564 lines of first-party code in ~2.3h (2,858 lines/hour, 3 commit session) (1ee1a6c9096e)
• 2,860 lines of first-party code in ~1.0h (2,750 lines/hour, 1 commit session) (e51ccc39077a)
• 7,887 lines of first-party code in ~3.3h (2,379 lines/hour, 10 commit session) (b2e1792adc4f)
• 3,087 lines of first-party code in ~1.3h (2,354 lines/hour, 1 commit session) (5725655d400a)
• 10,395 lines of first-party code in ~4.9h (2,139 lines/hour, 10 commit session) (d587fb345917)
• 1,815 lines of first-party code in ~0.9h (2,131 lines/hour, 1 commit session) (3489e2e99203)
• 3,986 lines of first-party code in ~2.1h (1,899 lines/hour, 3 commit session) (8c035c57e355)
• 6,531 lines of first-party code in ~3.5h (1,852 lines/hour, 4 commit session) (51c611d214b9)
• 2,941 lines of first-party code in ~1.7h (1,714 lines/hour, 2 commit session) (dbe0aa8ffa2f)
• 2,560 lines of first-party code in ~1.5h (1,668 lines/hour, 3 commit session) (09a6701faa41)
• 2,355 lines of first-party code in ~1.4h (1,668 lines/hour, 3 commit session) (dcabbefd1726)
• AGENTS.md (generic-agent configuration) (AGENTS.md)

AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.

Code quality

Code quality is adequate: test-to-source ratio 0.20, CI runs tests; 16% of function code in complex or long functions; 8% duplicated lines. Weakest area: type safety.

• Functions: 3,903; mean complexity 2.6, 90th percentile 6; 43 complex and 38 long functions
• Duplicated lines: 7.8% of 71,401 compared
• Tests: 20,299 test lines for 100,050 source lines (ratio 0.20); CI test commands: go test, cargo test; 21% of recent source commits also change tests
• Docs missing or thin: none

Most complex functions:

• apply_constraint in crates/mandrel-mcp-th/src/validation/jsonpath.rs: complexity 35, 175 lines
• parse_command in crates/codeprism-dev-tools/src/dev_repl.rs: complexity 33, 122 lines
• advanced_search in crates/codeprism-mcp-server/src/server.rs: complexity 32, 162 lines
• process_node in crates/codeprism-lang-java/src/ast_mapper.rs: complexity 31, 55 lines
• generate_markdown in crates/mandrel-mcp-th/src/reporting/mod.rs: complexity 30, 293 lines

Security

Security posture is weak: 183 known vulnerabilities in 50 dependencies; 3 high-severity SAST findings; 97 high-severity workflow issues. Weakest area: ci actions.

• Known vulnerabilities: 183 in 50 packages (critical 5, high 71, medium 82, low 22)

• Posture checks passed: security policy, signed commits; missing: dependency updates, lockfiles

Top findings

Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.

Distribution signals

• binary-release-asset: release v0.4.6 ships codeprism-windows-x86_64.exe (21 downloads)
• binary-release-asset: release v0.4.6 ships moth-windows-x86_64.exe (8 downloads)
• binary-release-asset: release v0.4.5 ships codeprism-windows-x86_64.exe (3 downloads)
• binary-release-asset: release v0.4.5 ships moth-windows-x86_64.exe (2 downloads)
• binary-release-asset: release v0.4.4 ships codeprism-windows-x86_64.exe (2 downloads)
• readme-download-lure: links directly to a downloadable archive or installer

Signals consistent with a repository that exists to distribute a download. They are heuristics, not a verdict; release files were not downloaded or inspected.

Repository profile

• Source lines: 100,050; test lines: 20,299

[![RepoTrust ai](https://repotrust.synapticcyber.com/badge/github.com/rustic-ai/codeprism/ai.svg)](https://repotrust.synapticcyber.com/r/github.com/rustic-ai/codeprism/)

[![RepoTrust quality](https://repotrust.synapticcyber.com/badge/github.com/rustic-ai/codeprism/quality.svg)](https://repotrust.synapticcyber.com/r/github.com/rustic-ai/codeprism/)

[![RepoTrust security](https://repotrust.synapticcyber.com/badge/github.com/rustic-ai/codeprism/security.svg)](https://repotrust.synapticcyber.com/r/github.com/rustic-ai/codeprism/)