CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
More
Settings
B
74/100
Health score

Insights

1 critical security issue found — immediate action recommended
Strong test suite with 57 test files (Good (50-80%))
How to improve this score74 → 87 possible
Gains are computed from the same formula that produced the score — completing everything below is worth 13 points.
+6.3
1. Fix no-hardcoded-secrets: Possible hardcoded API keysecurity
1 occurrence in 1 file (.github/workflows/sync-db.yml)
Fix it yourself

Change: Fix no-hardcoded-secrets: Possible hardcoded API key (no-hardcoded-secrets)

1 occurrence in 1 file (.github/workflows/sync-db.yml)

Where — Possible hardcoded API key:

  • .github/workflows/sync-db.yml:42

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+4
2. Add ~35 test files to reach a 80% test-to-source ratiotesting
57 test files today against ~114 source files (Good (50-80%))
Fix it yourself

Change: Add ~35 test files to reach a 80% test-to-source ratio

57 test files today against ~114 source files (Good (50-80%))

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+1.5
3. Split the largest files to bring average size under 5,000 bytescomplexity
Average is 7,860 bytes across 140 files; start with validators_test.go, postgres_test.go, http_test.go
Fix it yourself

Change: Split the largest files to bring average size under 5,000 bytes

Average is 7,860 bytes across 140 files; start with validators_test.go, postgres_test.go, http_test.go

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

+1.5
4. Push again — freshness decays the scoreactivity
Last push 68 days ago; pushing within 7 days is worth 30 of activity's 100 points
Fix it yourself

Change: Push again — freshness decays the score

Last push 68 days ago; pushing within 7 days is worth 30 of activity's 100 points

Make the change on a branch, push it, and open a pull request — the health score recomputes on the next visit.

Security75
19 of 25 possible overall points (weight 25%)
2 findings across 2 rules
1 critical · 0 high · 0 medium
Testing75
15 of 20 possible overall points (weight 20%)
57 test files
Coverage estimate: Good (50-80%)
Complexity60
9 of 15 possible overall points (weight 15%)
140 source files
Avg file size: 7,860 bytes
Largest: validators_test.go (68,254 bytes)
Dependencies100
15 of 15 possible overall points (weight 15%)
0 dependencies (go.mod)
Lockfile present
Documentation100
10 of 10 possible overall points (weight 10%)
README found
License present
34 doc files
Activity40
6 of 15 possible overall points (weight 15%)
0 commits (30d)
72 contributors
Last push: 68d ago
Security findings2 findings · 2 distinct rules
critical
Possible hardcoded API key — 1 occurrence in 1 file
no-hardcoded-secrets · sync-db.yml (1)
details
.github/workflows/sync-db.yml — line 42
low
Security linter rule disabled — 1 occurrence in 1 file
no-security-disable · http.go (1)
details
internal/api/handlers/v0/auth/http.go — line 44
Zero-config CIAuto-detected · Go project detected
Build
go build ./...
Test
go test ./...
Vet
go vet ./...