marksoper/phone-verification
48.8
Weak · 21 September 2026
939
lines of production code
JavaScript
primary language
4
measurements over time
What this system is
Housekeeping
8 commits touching docs/config only — no user-facing changes this sprint
A non-behavioural change (docs/formatting/config) in (repo-wide) — 8 commits (2 fixs), 2 files.
(repo-wide) · high confidence · unverified
Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.
How this codebase got here
This is the PUBLIC form of this artifact. Findings are listed in full, but the details of SECURITY findings — which rule fired, in which file, on which line, and how to fix it — are deliberately withheld, and any secret-scanner results are excluded entirely. Where detail is absent here it was REMOVED FOR PUBLICATION; it is not missing from the analysis. The complete artifact is available from the repository owner.
Score
- CAI 48 → 49 (+1.2)
- Rubric changed (rubric-2026.08.18 → rubric-2026.09.15) — scores are not directly comparable.
Lenses
- Code Health 65 → 66 (+1.1)
- Architecture 69 → 69 (+0.0)
- Maturity 57 → 62 (+4.9)
- Readiness 26 → 28 (+2.3)
- Security 100 → 98 (-1.7)
Resolved (9)
- Coverage not included — suite not readable by the collector
- Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
- No exposed public API
- Scanner failed to run — not a clean result
- Test reliability not included
- early-stage repository — too little history to judge knowledge freshness
- git history depth insufficient
- git history depth insufficient
- single-maintainer — knowledge-concentration (bus factor) risk
New (9)
- Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no committed lockfile, so no resolved version to grade)
- Documentation: no installation or build instructions (README.md)
- Documentation: no usage examples (README.md)
- Medium: security finding (details withheld)
- No ADRs found
- No assertions: renders without crashing (webapp/src/App.test.js)
- Scanner failed to run — not a clean result
- Scanner failed to run — not a clean result
- Test project verifies nothing: webapp (webapp/src/App.test.js)
Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.
Survey your own repository
marksoper/phone-verification was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.
About this page
- The score is its most recent published measurement, taken on 21 September 2026 at a pinned commit. It is not a live figure and does not change until the project is measured again.
- Measured at commit 2f604a88d1badd48e8d1052991a46a6e6b31292f — the exact code this score is about.
- Scored under rubric-2026.09.15 — the same rubric and the same method as every other entry in this index.
- Measured by watchdog.canine.dev using codehealth-analyzer preprod-28e75b8e3254.