CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
More
Settings
F
37/100
Health score

Insights

3 critical security issues found — immediate action recommended
No tests found — adding tests would significantly improve code reliability
No LICENSE file — open source projects need a license to be usable
No activity in 90+ days — project may be dormant
How to improve this score37 → 79 possible
Gains are computed from the same formula that produced the score — completing everything below is worth 42 points.
+18.8
1. Fix no-hardcoded-secrets: Possible hardcoded API keysecurity
3 occurrences in 1 file (lib/env-check.ts)
Fix it yourself

Change: Fix no-hardcoded-secrets: Possible hardcoded API key (no-hardcoded-secrets)

3 occurrences in 1 file (lib/env-check.ts)

Where — Possible hardcoded API key:

  • lib/env-check.ts:39, 40, 41

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+10
2. Add a test suite — any tests at all move the score off zerotesting
0 test files today against ~122 source files (None)
Fix it yourself

Change: Add a test suite — any tests at all move the score off zero

0 test files today against ~122 source files (None)

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+4.5
3. Push again — freshness decays the scoreactivity
Last push 132 days ago; pushing within 7 days is worth 30 of activity's 100 points
Fix it yourself

Change: Push again — freshness decays the score

Last push 132 days ago; pushing within 7 days is worth 30 of activity's 100 points

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+2.3
4. Fix no-inner-html: Direct innerHTML assignment — potential XSSsecurity
3 occurrences in 2 files (chrome-extension/content.js, chrome-extension/popup.js)
Fix it yourself

Change: Fix no-inner-html: Direct innerHTML assignment — potential XSS (no-inner-html)

3 occurrences in 2 files (chrome-extension/content.js, chrome-extension/popup.js)

Where — Direct innerHTML assignment — potential XSS:

  • chrome-extension/content.js:33
  • chrome-extension/popup.js:334, 338

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+2
5. Add a LICENSE filedocumentation
Unlicensed code is legally unusable by anyone else
Fix it yourself

Change: Add a LICENSE file

Unlicensed code is legally unusable by anyone else

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+1.5
6. Split the largest files to bring average size under 5,000 bytescomplexity
Average is 7,347 bytes across 122 files; start with page.tsx, page.tsx, page.tsx
Fix it yourself

Change: Split the largest files to bring average size under 5,000 bytes

Average is 7,347 bytes across 122 files; start with page.tsx, page.tsx, page.tsx

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+1.5
7. Add CONTRIBUTING.mddocumentation
Tells collaborators how to work on the repo
Fix it yourself

Change: Add CONTRIBUTING.md

Tells collaborators how to work on the repo

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+1.5
8. Add a CHANGELOGdocumentation
Lets users see what changed between versions
Fix it yourself

Change: Add a CHANGELOG

Lets users see what changed between versions

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

Security16
4 of 25 possible overall points (weight 25%)
6 findings across 2 rules
3 critical · 0 high · 3 medium
Testing0
0 of 20 possible overall points (weight 20%)
No tests found
Coverage estimate: None
Complexity70
11 of 15 possible overall points (weight 15%)
122 source files
Avg file size: 7,347 bytes
Largest: page.tsx (66,387 bytes)
Dependencies100
15 of 15 possible overall points (weight 15%)
20 dependencies (package.json)
Lockfile present
Documentation46
5 of 10 possible overall points (weight 10%)
README found
No license
3 doc files
Activity20
3 of 15 possible overall points (weight 15%)
0 commits (30d)
3 contributors
Last push: 132d ago
Security findings6 findings · 2 distinct rules
critical
Possible hardcoded API key — 3 occurrences in 1 file
no-hardcoded-secrets · env-check.ts (3)
details
lib/env-check.ts — lines 39, 40, 41
medium
Direct innerHTML assignment — potential XSS — 3 occurrences in 2 files
no-inner-html · popup.js (2), content.js (1)
details
chrome-extension/popup.js — lines 334, 338
chrome-extension/content.js — line 33
Zero-config CIAuto-detected · Node.js project detected · TypeScript detected · Next.js framework · React
Type check
npx tsc --noEmit
Build
npm run build