AI Assessment
VERDICT
Based on automated scanner findings, this repository appears reasonably secure and dependency-sound, but has moderate code quality issues that should be addressed before production deployment. The score reflects maintainability concerns rather than security risks.
TOP RISKS
→ Semgrep detected 10 instances of duplicated code blocks (36 lines each) across widget files in lib/presentation/pages/admin/widgets/. The scanner flagged add_felix_widget.dart:135, edit_widget.dart:241, and felix_table.dart:205 as examples. This duplication inflates maintenance burden and bug-fix risk.
→ No LICENSE file was detected. This creates legal ambiguity about code usage rights and may block adoption or contribution.
→ Repository lacks CI/CD configuration (no workflow files detected). Automated testing and build verification are not running on commits.
→ Missing SECURITY.md file means no documented vulnerability reporting process or security contact information is available.
→ No CODEOWNERS file detected, so code review responsibility and ownership patterns are undefined.
WHAT TO FIX FIRST
Extract the duplicated 36-line widget code block (appearing in add_felix_widget.dart:135, edit_widget.dart:241, and felix_table.dart:205) into a shared helper component. This single refactor would eliminate 10 medium-severity findings and significantly improve maintainability.
NOTE: All findings are automated detections. The duplicated code blocks should be verified in context—some may be false positives if the code differs slightly. The absence findings (missing files) are straightforward to address with template additions.
Category Breakdown
Findings(28 in 5 groups)
Duplicate found between lib/presentation/pages/admin/widgets/add_felix_widget.dart:135 and lib/presentation/pages/admin/widgets/edit_widget.dart:240. Consider extracting shared logic into a reusable function or module.
Affected files
This repository has no LICENSE file. Without a license, the code is technically all-rights-reserved by default, which prevents others from using it.
Affected files
No CI/CD configuration was found (GitHub Actions, GitLab CI, CircleCI, etc.). Continuous integration helps catch issues before they reach production.
Affected files
This repository has no SECURITY.md file. A security policy helps users report vulnerabilities responsibly and shows that the project takes security seriously.
Affected files
This repository has no CODEOWNERS file. CODEOWNERS ensures that pull requests are automatically assigned to the right reviewers, improving code review coverage.
Affected files
Share your ShipScanner
Show the world your code quality. Your report has a beautiful preview image built in.
Embed Trust Badge
Show your code quality score in your README. The badge updates automatically every time you re-scan.
[](https://shipscanner.dev/report/cmmxf44np0001l50431ajzwqe)