farzaa/clicky

The project configuration no longer contains hardcoded Anthropic API keys, URLs, or model names in the Xcode build settings. This change removes sensitive credentials (specifically for the Anthropic API) from the repository, improving security by preventing accidental exposure of API keys in the source code.

leanring-buddy.xcodeproj · high confidence

The Swift source files for the leanring-buddy module have been updated to replace actual Cloudflare Worker proxy URLs with generic placeholders. Specifically, the AssemblyAI streaming transcription provider and the companion manager now point to 'your-worker-name.your-subdomain.workers.dev' instead of the previous live endpoints. This change ensures that sensitive proxy URLs are not hardcoded into the application binary, likely to prevent unauthorized access or to allow for easier configuration of the backend services.

leanring-buddy · medium confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 45 → 55 (+9.7)
• Rubric changed (rubric-2026.08.15 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 92 (-8.1)
• Architecture 100 (new)
• Maturity 59 → 67 (+8.2)
• Readiness 17 → 26 (+9.6)
• Security 85 → 96 (+10.7)

• Dimension evaluation failed
• High CVE: [GHSA redacted] (worker/package-lock.json)
• High CVE: [GHSA redacted] (worker/package-lock.json)
• High CVE: [GHSA redacted] (worker/package-lock.json)
• High CVE: [GHSA redacted] (worker/package-lock.json)
• High CVE: [GHSA redacted] (worker/package-lock.json)
• Low CVE: [GHSA redacted] (worker/package-lock.json)
• Low CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• Medium CVE: [GHSA redacted] (worker/package-lock.json)
• No automated tests
• No exposed public API
• No tests found
• …and 7 more

• Assertions commented out: testExample (leanring-buddyUITests/leanring_buddyUITests.swift)
• BlueCursorView.body (cognitive 25) (leanring-buddy/OverlayWindow.swift)
• BlueCursorView.body (cyclomatic 25) (leanring-buddy/OverlayWindow.swift)
• BuddyPushToTalkShortcut.shortcutTransition (cognitive 17) (leanring-buddy/BuddyDictationManager.swift)
• ClassTooLong: BuddyDictationManager (leanring-buddy/BuddyDictationManager.swift)
• ClassTooLong: CompanionManager (leanring-buddy/CompanionManager.swift)
• ClassTooLong: CompanionPanelView (leanring-buddy/CompanionPanelView.swift)
• ClaudeAPI.analyzeImageStreaming (cognitive 21) (leanring-buddy/ClaudeAPI.swift)
• ClaudeAPI.analyzeImageStreaming (cyclomatic 17) (leanring-buddy/ClaudeAPI.swift)
• CompanionManager.sendTranscriptToClaudeWithScreenshot (cognitive 24) (leanring-buddy/CompanionManager.swift)
• CompanionScreenCaptureUtility.captureAllScreensAsJPEG (cognitive 16) (leanring-buddy/CompanionScreenCaptureUtility.swift)
• Documentation: no contributor guidance (README.md)
• Documentation: no project overview (README.md)
• Duplicated block (10 lines × 2) (leanring-buddy/ClaudeAPI.swift)
• Duplicated block (10 lines × 2) (leanring-buddy/CompanionPanelView.swift)
• Duplicated block (10–12 lines × 2) (leanring-buddy/ClaudeAPI.swift)
• Duplicated block (11 lines × 2) (leanring-buddy/AssemblyAIStreamingTranscriptionProvider.swift)
• Duplicated block (11 lines × 2) (leanring-buddy/ClaudeAPI.swift)
• Duplicated block (11 lines × 2) (leanring-buddy/CompanionPanelView.swift)
• Duplicated block (11 lines × 2) (leanring-buddy/DesignSystem.swift)
• …and 40 more

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

farzaa/clicky was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.