Lines vs main
225
+184 / −41 · 6 files · 11 hunks
Sample dashboard — no GitHub token required
#128 Throttle webhook retries and persist delivery receipts
acme/ledger-api · m.vale · main ← feat/webhook-receipts
Retries were unbounded after the billing cutover. This change caps attempts, stores receipts, and adds a coverage gate on the worker.
AI-declared lines
62%
114 of 184 added lines were last written by commits that declare an AI author
Coverage of added lines
75.7%
103 of 136 executable added lines ran in CI
Confidence
75/100
strong · a score from the factors below, not a probability
Discussion
- s.ortiz — Can the receipt table expire rows after 30 days?
How the confidence score adds up
| Starting point | 50 | |
| CI | all 4 passing | +25 |
| Coverage of added lines | 75.7% (ci-artifacts) | +5 |
| Tests changed | 2 of 3 changed source files | +5 |
| Security findings | none high or medium | 0 |
| Known vulnerabilities | 1 high | -10 |
| Score | strong | 75 |
AI attribution
Counts lines last written by commits that declare an AI author or co-author. AI use that commits don't declare isn't counted, and neither are lockfiles or generated files.
Coverage
Measured from coverage.
Tests changed for 2 of 3 changed source files (by file name, not coverage).
Vulnerable dependency versions
-
HIGH
CVE-2023-26136
tough-cookie 2.5.0
transitive
tough-cookie Prototype Pollution vulnerability
Fixed in 4.1.3. Was 4.1.3 before this change.
Security findings
-
low
Cleartext HTTP endpoint
src/metrics.js:18
fetch("http://metrics.acme-corp.io/v1")
What was checked
| File type | Files | Added lines | Checked for |
|---|---|---|---|
| JavaScript | 5 | 172 | code execution, SQL injection, unescaped HTML, weak hashes on secrets, broken ciphers, cleartext HTTP, known token formats, possible credentials, world-writable or wildcard permissions |
Not scanned: 1 file (lockfile, vendored or generated, 12 lines).
Sample mode cannot mutate GitHub. Authorize to approve, comment, or close a live PR.